Logo

Server certificate revoked ERR_CERT_REVOKED!

While browsing the internet, if you suddenly encounter a warning with an error message saying, “Server certificate has been revoked ERR CERT REVOKED” then it indicates that the SSL certificate used by the website has been revoked by its issuer. This kind of problem can only be fixed by the website owner but that does not mean that you can’t do anything about it. In fact, you have the option to bypass this error as well as contact the certificate issuer – all this and more.

Just a reminder, if a website that accepts payment, its passwords don’t have SSL or has some certification issue, you should never trust it. For instance, if you are trying to purchase something online and you’re on the payment stage but you encounter the “Server certificate has been revoked ERR CERT REVOKED” error, you must not proceed.

To resolve the “Server certificate has been revoked ERR CERT REVOKED” error, here are some things you can do.

Option 1 – Try contacting the Certificate Issuer

If you are the website owner, of course, the best thing you can is to get in touch with the Certificate Issuer in order to resolve the problem.

Option 2 – Try fixing the Date and Time

You have to check your computer’s Date and Time. There are cases when this simple setting causes a connection problem. So if your computer Date and Time is set to date or time that this after the certificate expiration date, then you have to make sure that you set it to automatically configure time. To do so, just open Settings > Time and Language. From there, turn on the toggle for “Set time automatically” and “Set time zone automatically” options. After that, check if it fixes the error, if not, you need to check if the manual selection is correctly set or not.

Option 3 – Bypass the Certificate Revocation Check

As pointed out earlier, you have the option to bypass the Certificate Revocation check. All you have to do is follow the steps below.

  • In the search box of your browser, type “internet options” and open it once it appears.
  • After that, go to the Advanced tab and navigate to the Security subheading.
  • Next, uncheck the “Check for publisher’s certificate revocation” option as well as the “Check for server certificate revocation” option.
  • Now restart your computer. Upon the next startup, try opening the website again. This time, your browser will stop checking it for certificate issues. However, it’s not safe to leave those options unchecked so make sure that once the website’s SSL certificate is fixed or once you no longer have to visit that website, you recheck those options.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

Error 1753 Demystified & The Quickest Fix Ever!

Error 1753 - What is it?

Error 1753 is an RPC endpoint mapper error code. This code is typically displayed as "EPT_S_NOT_REGISTERED" or sometimes as the hexadecimal value 0x6D9.  Error 1735 indicates that there are no more endpoints available from the endpoint mapper. To understand this better, basically, RPC is an inter-process communication (IPC) method. This is used by clients and servers for communication purposes. RPC is used by programs to execute programs on a server computer. The perfect example of this is Microsoft Outlook. You communicate with Microsoft Exchange Server using RPC. This enables you to send and receive emails. When you use Microsoft Outlook to send emails, your computer sends a message to the server computer in an obscure coding. The server responds to your computer with another message that contains the results of the executed program. This is all being carried at the backend of the running program. Integral to this is the endpoint. The endpoint includes the name, port, or a group of ports on a computer that is monitored by the server for incoming client requests. This is a network-specific address to be precise. The endpoint mapper is the part of the RPC subsystem that is responsible for dynamically assigning endpoints to the server. When this function fails it leads to error 1753 message display. It shows that RPC service is not available.

Solution

Restoro box imageError Causes

The error code 1753 indicating RPC endpoint mapper service failure is triggered due to multiple reasons. These include:
  • Windows registry damage and corruption
  • Malfunctioning of the hardware
  • Spyware intrusion or viral infections
  • Device driver conflicts

Further Information and Manual Repair

This error code may cause a great deal of inconvenience to execute programs that are dependent on the server. It can lower your productivity and performance. To avoid the hassle, it is advisable to repair the error 1753 immediately. The best way to resolve this error 1753 in seconds is to download Restoro. By using this repair tool, you can fix the error right away for free without paying hundreds of dollars to a professional expert. Restoro is a new and innovative PC fixer integrated with an automated algorithm and intuitive technology that enables users to sit back and relax while Restoro runs on the system and detects all PC-related issues in the shortest time. In just a few clicks you can resolve even the mightiest PC issues like the error code 1753 RPC endpoint mapper problem and resume back to the program in no time.

Why Restoro

It is efficient and user-friendly. Restoro can be used by users of all levels so even if this is your first experience using a repair tool, you don’t have to worry. To operate it, you don’t have to be a computer programmer or have sound technical expertise. It is simple and very easy to use. The layout is simple and neat complimented nicely with easy navigation and a sophisticated user interface. Restoro is a high and multi-functional error tool embedded with powerful, performance-driven, and value-adding utilities, all in one. So, whether the error code 1753 is triggered due to a viral infection on your system or registry corruption, you don’t have to look for different tools to resolve the error, simply run Restoro to fix the issue right away. Restoro includes a dynamic registry cleaner that detects all registry issues and wipes out the clutter from the hard disk like junk files, internet history, and invalid entries which is by the way the number cause for registry corruption leading to error 1753. It clears up disk space and RAM and repairs the misconfigured system files and corrupt registry in seconds thus resolving error 1753. Restoro also functions as a system optimizer thus boosting the speed and performance of your PC massively and reducing boot time. In addition to this, it also has a backup feature.  This tool is embedded for safety purposes. This feature enables you to create backup files on your PC before you start system repair. This helps you recover data in the event of data loss during system repair. To get started:
  • Click here to download and install Restoro on your system
  • After installation, run it to scan for errors like 1753
  • Now press the repair tab to resolve
Read More
Get a Custom URL for Your YouTube Channel
Having a youtube channel nowadays is quite an easy task, you just need to create a free google account and there you go, you can start uploading videos to your YouTube channel. All you need in today's world is some applications for manipulating video material, creation of titles and graphics, some charisma and ideas for content and you could be a well-known YouTuber. For some guidance on software needed for this kind of creativity, we urge you to check our article about open source free software alternatives to paying ones here. So now that we have technicality out of way there is one more prerequisite that is needed in order for you to have your unique custom URL for your channel.
  • The channel must be at least 30 days old.
  • The channel must have a profile picture and a banner image.
  • The channel must have at least 100 subscribers.
You need to fulfill all three prerequisites in order to change your typical URL to something nicer and personal like youtube.com/myGREATchannel So if you have everything needed let's get that custom URL for your channel.
  1. Sign in to your YouTube channel
  2. On the top-right corner of the YouTube window, click on your profile picture.
  3. From the drop-down menu, select YouTube Studio.
  4. From the list on the right side of the YouTube Studio page, select Customization.
  5. Under Channel customization, select Basic info.
  6. Under Channel URL, click on Set a custom URL for your channel.
  7. Your custom URL will appear in the box below. You can change it as you desire.
  8. Click on the Publish button on the top-right corner of the window to set your custom URL.

WORD OF WARNING:

Once the custom URL is set, it can neither be changed nor transferred to someone else so make sure that channel name is really something that you want for the long run.
Read More
Do-It-Yourself Guide to Fixing Runtime Error 5

Runtime Error 5 - What Is It?

Runtime Error 5 is one of those errors that Windows users encounter at least once in their life. Generally, when Runtime Error 5 occurs, the message that appears says ‘Invalid Procedure Call or Argument’. Runtime Error 5 occurs because the Quality Analyst function that resides within the Operating System behaves in an abnormal manner and the user receives a warning.

Solution

Restoro box imageError Causes

As explained above, Runtime Error 5 is caused because of the unexplained behavior of the Quality Analyst function. The problem occurs when the function is lost and is not mapped to any drive. As a result, Windows is unable to find and load it and displays the error message. Runtime Error 5 is also caused by other reasons listed below as follows.
  • When files of programs like Visual Basic use bad entries in the registry.
  • When a user attempts to load Internet Explorer and a global cash of browser occurs, this also causes Runtime Error 5.
Since these types of errors can easily be fixed, it is strongly advised that a user takes the necessary actions to keep them from occurring in the future.

Further Information and Manual Repair

Some instructions for users to fix Runtime Error 5 as soon as it appears are listed below as follows.
  1. Users are recommended to restart their computers. However, prior to doing so, it is advised that any programs that are opened are closed and work is saved to prevent data loss. Once the computer restarts, users should load the program that triggered Runtime Error 5 once again to determine whether or not the error recurs.
  2. If the problem persists, the best approach is to uninstall the program causing the error. This can be accomplished by going to the ‘Control Panel’ and selecting the ‘Add/Remove programs’ option if one is using Windows XP or Windows 95. However, if a user is running Windows 7, the same task can be accomplished in the ‘Program and Features’ option. If there’s an option that allows you to clear personal settings and preferences, the box should be checked.
  3. Now reinstall the program using the latest version of the installer to stop encountering this error. Use any patch for the program if available. Run installer while following the instructions on the screen. Check the default settings as well.  It is suggested to instantly install any patches if available.
  4. Another piece of advice is to simultaneously press ‘Ctrl, Shift, and Esc’. Windows task manager will appear. Go to the “processes” tab and select a process that doesn’t look familiar to you. Note the filename and click on the ‘End Process’ button. Load the program again and find out if the error occurs. Once the program causing the error is identified, the user can perform the steps listed above to resolve the problem.
Read More
How to Fix Ehshell.exe Application Error Code

Ehshell.exe Application Error - What is it?

Ehshell.exe is a type of .exe (executable file). This file functions as an essential component of the Microsoft Media Center.  By default, it is located in a subfolder of C:\Windows. Ehshell.exe application error is an error code that pops up when tasks in the Media Center freezes. The Ehshell.exe application error is usually displayed on the screen in the following format:
“ehshell.exe – Common Language Runtime Debugging Services Application has generated an exception that could not be handled. Process id=0xa18 (2584), Thread id=0xa24 (2596).”

Solution

Restoro box imageError Causes

Ehshell.exe application error is triggered when PC users perform repetitive tasks in Media Center on a Windows XP Media Center Edition. The computer stops to respond and the error message is displayed. This error occurs if users perform one or more of the following repetitive tasks in the Media Center:
  • Repeated resize, restore and minimize the Media Center Window
  • Schedule TV shows to record
  • Repeatedly change the channel while Media Center is in a window
  • Ehshell.exe file corruption due to malware infection or registry issues
Though this is not a fatal error, to avoid any kind of inconvenience, it is advisable to fix the error right away.

Further Information and Manual Repair

To fix the ehshell.exe application error on your system, you don’t have to hire a professional and spend hundreds of dollars on repair. Here are some of the best and most effective do-it-yourself methods that you can try to resolve this issue on your PC immediately.

Method 1 - Install the Latest Service Pack for Microsoft Windows

To repair the issue, install the latest Windows service pack. A service pack is basically a Windows update, often combines previously released updates that help make Windows more reliable. These are offered free of charge on Microsoft’s official website.  To get started, simply log on to Microsoft’s official website and download the latest service pack compatible with your Windows version. The installation process may take 30 minutes to install. And you will be prompted to restart your PC about halfway through the installation process. Once the Windows Service Pack is installed, the ehshell.exe application error will be fixed. If the error still persists, then try method 2.

Method 2 - Scan for Malware

Ehshell.exe application error may also appear on your PC due to malware infection. Malware programs like viruses, Trojans, and worms deliberately give their malicious processes similar .exe file names, so it is hard to identify the malware. In such an event, it is advisable to download a powerful antivirus and scan your entire PC. Run it to remove all the hidden malware programs on your system. Once malware is removed, the ehshell.exe application error will be resolved.

Method 3 - Clean Registry

Sometimes .exe files can also get corrupt when the registry gets overloaded with unnecessary and obsolete files. If this is the underlying reason for the error code occurrence then it is advisable to download Restoro. This is a multi-functional and user-friendly PC Fixer deployed with a registry cleaner. It removed all the unnecessary files, cleans and repairs the registry in seconds thereby fixing all registry-related errors. Click here to download Total System Care and resolve the Ehshell.exe application error on your PC.
Read More
Importing and Exporting WSL distros in Windows
In this post, you will be guided on how to import and export the WSL distros in your Windows 10 computer. WSL, also known as Windows Subsystem for Linux, is a compatibility layer needed to run Linux binary executable in Windows 10, as well as the Windows Server 2019. In case you don’t know, when you reinstall or reset Windows 10, all of its configuration data stored with the WSL distros gets deleted. Going back or restoring the configuration can be quite challenging but worry not for Microsoft has already got this covered as you can now import and export the WSL or Windows Subsystem for Linux distros. There are three aspects that you have to deal with when you import or export WSL distros in your Windows 10 computer, such as importing WSL distro, exporting WSL distro, and uninstalling the imported WSL distros. Before you proceed to the instructions provided below, make sure that all your installed distros are updated via Microsoft Store. Once you have this covered, follow the options below.

Option 1 – Import the WSL distro

  • Type “command prompt” in the Start Search and from the search results, right-click on Command Prompt and then select the “Run as administrator” option.
  • After opening Command Prompt as admin, execute this command: wsl --list –all
  • The command you entered will list all the installed WSL distros on your computer. And now it’s time for you to import a WSL distro by executing this command: wsl --import <Name of the distro> <Fill path to save the backup .tar file>
Note: In the given command above, replace “<Name of the distro>” with the name of the distro you want to import and replace “<Fill the path to save the backup .tar file>” with the location where you want to save the .tar file.

Option 2 – Export the WSL distro

  • Type “command prompt” in the Start Search and from the search results, right-click on Command Prompt and then select the “Run as administrator” option.
  • After opening Command Prompt as admin, execute this command to see the list of all the installed WSL distros in your computer: wsl --list –all
  • After that, execute this command to export a WSL distro: wsl --export <Name of the distro> <Fill path to save the backup .tar file>

Option 3 – Uninstall the imported WSL distro

  • Open Command Prompt with admin privileges.
  • Next, execute this command to view the list of all the installed WSL distros: wsl --list –all
  • After that, execute this command to uninstall an imported WSL distro: wsl --unregister <Name of the distro>
  • Once it’s done, close Command Prompt and restart your computer.
Read More
New Snipping tool redesigned in Windows 11
Windows 11 Snipping toolThe latest update from Panos Panay on Twitter is including New and redesigned Snipping tool inside Windows 11. From the shared video, we can see that it includes modern Windows 11 UI redesign and it looks and feels like a part of Windows 11. More things that can be seen from the shared video is that it looks like the new snipping tool is a merged version of the old with snip & sketch. It is good to see that it is still possible to capture screen with easier way natively inside Windows 11 but some more functionality would be more welcome I guess. Users were asking for added functions for a long time like adding simple text for example but from shared video, no new features were presented so for some users 3rd party solutions will still be the way to go. The new and redesigned Snipping tool will roll out with the next update and we will see then about all new features inside it firsthand. Until then, take care.
Read More
DNS_PROBE_FINISHED_BAD_CONFIG error in Chrome
If you always use Google Chrome when browsing the internet, then you might have come across an error saying, “This webpage is not available, DNS PROBE FINISHED BAD CONFIG”. If you do, then this problem certainly has something to do with the DNS since any error code which has “DNS” in it points out a network issue in the computer. Getting the DNS_PROBE_FINISHED_BAD_CONFIG error indicates that your computer is not able to connect the website because the Domain Name Server or DNS wasn’t able to resolve the website name into IP address or it is not available at all. So in this guide, we’ll help you sort out this issue in Chrome on your Windows 10 PC.

Option 1 – Check the Network Cables and restart your router then reconnect

The most obvious thing you can do first is to try checking if the network cables connected to your computer or router are properly connected or not. If it turns out that some network cables are not connected properly, then it’s probably why you’re getting the DNS_PROBE_FINISHED_BAD_CONFIG error in Chrome. And if your computer is connected via Wi-Fi, you need to make sure to restart your router once. In addition, you can also forget the Wi-Fi your computer is currently connected to and then try reconnecting again to see if it would work.

Option 2 – Flush the DNS and reset TCP/IP

Flushing the DNS and reset TCP/IP could also help in fixing the DNS_PROBE_FINISHED_BAD_CONFIG error in Chrome. To do so, refer to these steps:
  • Click the Start button and type in “command prompt” in the field.
  • From the search results that appear, right-click on Command Prompt and select the “Run as administrator” option.
  • After opening Command Prompt, you have to type each one of the commands listed below. Just make sure that after you type each command, you hit Enter
    • ipconfig /release
    • ipconfig /all
    • ipconfig /flushdns
    • ipconfig /renew
    • netsh int ip set dns
    • netsh winsock reset
After you key in the commands listed above, the DNS cache will be flushed and the Winsock, as well as the TCP/IP, will reset.

Option 3 – Try to remove the Proxy

You can also try to remove the Proxy as it might also help you in fixing the DNS_PROBE_FINISHED_BAD_CONFIG error. Here’s how you can do it:
  • Tap the Win + R keys to open the Run dialog box.
  • Then type “inetcpl.cpl” in the field and hit Enter to pull up the Internet Properties.
  • After that, go to the Connections tab and select the LAN settings.
  • From there. Uncheck the “Use a Proxy Server” option for your LAN and then make sure that the “Automatically detect settings” option is checked.
  • Now click the OK and the Apply buttons.
  • Restart your PC.
Note: If you are using a third-party proxy service, you have to disable it.

Option 4 – Change the DNS

Try to use the Google Public DNS If the first option didn’t work, you can try to use the Public DNS by Google and see if it can help fix the DNS error. You have to modify the DNS settings in your system explicitly and use the DNS IP addresses.
  • The first thing you have to do is right-click on the network icon in the Taskbar and select Network and Sharing Center.
  • Next, click on the “Change Adapter Settings” option.
  • After that, search for the network connection that you are using to connect to the internet. Note that the option might be “Wireless Connection” or “Local Area Connection”.
  • Right-click on your network connection and click on Properties.
  • Then select the new window to choose the “Internet Protocol 4 (TCP/IPv4)” option.
  • After that, click on the Properties button and click the checkbox in the new window for the option “Use the following DNS server addresses”.
  • Type in “8.8.8” and “8.8.4.4” and click OK and exit.

Option 5 – Clear Chrome’s browsing data

If your browsing data in Chrome hasn’t been cleared for some time now then that might be the reason why you’re suddenly getting the DNS_PROBE_FINISHED_BAD_CONFIG error when you browse the web. To fix this error, you need to clear your web browsing data. Refer to the following steps to do so.
  • Tap the Ctrl + Shift + Delete buttons to go to the Clear browsing data section in Chrome.
  • Next, set the time range to “All time” and tick all the boxes and then click on the Clear data button.
  • After that, restart the Chrome browser and try to open the website you were trying to open earlier.

Option 6 – Try running the Chrome Cleanup tool

In case you don’t know, there is actually a built-in malware scanner and cleanup tool in Chrome that helps you get rid of any unwanted ads, pop-ups, and even malware, as well as unusual startup pages, toolbars, and other things that could affect the performance of the browser.
Read More
Moving Start Menu to the Second Monitor
One of the most important User Interface elements in a Windows 10 operating system is the Start Menu. Not too long ago, Microsoft has added some new features and redesigned the Start Menu a couple of times as well. Thus, it is not uncommon for Windows 10 users to use several monitors. That’s why in this post, you will be guided on how you can move the Start Menu to your second monitor in Windows 10. There are a lot of advantages in using more than one monitor like a better and widescreen as well as help in improving and increasing productivity. Usually, the Start Menu and the taskbar is present in the original monitor only. In most cases, it helps users in moving the Start Menu to the second monitor and helps users in segregating tasks, and uses separate monitors for each kind of task. There are two simple steps to move the Start Menu to the second monitor. You have the option to unlock and drag the taskbar, as well as make adjustments in the settings. To get started, refer to each one of the following options to move the Start Menu to the second monitor.

Option 1 – Move the second monitor by unlocking and dragging the taskbar

The first option you can try to move the Start Menu to the second display is to simply unlock and then drag the taskbar. To do so, follow these steps:
  • First, click on the Taskbar and unlock it.
  • Next, uncheck the Lock the taskbar feature in the menu of the Taskbar Settings. This will free the taskbar so you can move or drag it around.
  • After that, push the Start Menu to the furthermost corner of the screen and then transfer it to the second monitor.

Option 2 – Move the second monitor using the keyboard

  • The first thing you have to do is to tap the Windows key to open the Start Menu.
  • Next, close the Start Menu by tapping the Esc key.
  • After that, the controls will shift back to the taskbar.
  • Now open the context menu of the taskbar by tapping the Alt + space bar together. This will move the Start Menu to the second monitor.

Option 3 – Move the Start Menu to the second monitor via Settings

If you find that the Taskbar is moving to the wrong monitor automatically or if the program does not start on the same monitor as the taskbar, then you can try this option.
  • Click on Start first and click Run.
  • Then type “desk.cpl” in the field and click OK.
  • Alternatively, you could also right-click on the desktop and select the Screen Resolution option from the drop-down menu.
  • After that, click on the monitor that you want to use as the primary monitor and select the checkbox labeled “Make this my main display”.
  • Once done, you have to choose the “Show desktop” on only 1 from the drop-down menu of Multiple displays.
  • Now click the Keep Changes option and select the Extend these displays from the Multiple displays drop-down menu and then click on the Apply button to save the changes made.
  • Afterward, click the Keep changes option once the dialog box pops up.
Read More
Perform System Restore when Windows won’t boot
System restore is usually the go-to tool when something goes bad in Windows, we fire it up and roll back Windows in the state when everything was working fine. But what if Windows does not want to boot? Can we use system restore in that case? The answer to that question would be yes, yes we can.
  1. Boot interrupt Windows 10 by starting your PC and as soon as you see the Windows logo; press and hold the power button to force a shutdown.
  2. Repeat this 2-4 times and Windows will open up the Advanced Startup Options menu for you.
  3. At the Advanced Startup Options screen, select Advanced Options.
  4. Select Troubleshoot.
  5. Under the Advanced options screen, select System Restore.
or if you prefer, use Windows USB installation.
  1. Boot the faulty PC using the Windows 10 installation media.
  2. The Windows Setup dialog box will appear.
  3. Set the Time and currency format, Keyboard or input method, and the language to install.
  4. Click Next.
  5. Click on Repair your computer from the lower-left corner.
  6. From the Choose an option screen, click on Troubleshoot.
  7. Click Advanced Options in the Troubleshoot screen.
  8. In the Advanced Options screen, click System Restore.
  9. Windows will take some time to prepare System Restore. It may even restart your computer or device.
  10. When System Restore is ready, you will be prompted to choose a user account to continue.
  11. Select an account that is set as administrator on your Windows 10 computer or device.
  12. At the next screen, change the keyboard layout if you want and then input the password for that account.
  13. Click the Continue button.
Read More
Android malware spies while posing as a Update
New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:
  • Stealing instant messenger messages;
  • Stealing instant messenger database files (if the root is available);
  • Inspecting the default browser's bookmarks and searches;
  • Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
  • Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
  • Inspecting the clipboard data;
  • Inspecting the content of the notifications;
  • Recording audio;
  • Recording phone calls;
  • Periodically take pictures (either through the front or back cameras);
  • Listing of the installed applications;
  • Stealing images and videos;
  • Monitoring the GPS location;
  • Stealing SMS messages;
  • Stealing phone contacts;
  • Stealing call logs;
  • Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status