The code further uses a lib2p-based network stack to interact with the Interplanetary File System, which is often abbreviated at IPFS.
Bitdefender said the Amazon-owned doorbell was sending owners’ Wi-Fi passwords in cleartext as the doorbell joins the local network, allowing nearby hackers to intercept the Wi-Fi password and gain access to the network to launch larger attacks or conduct surveillance.
The campaign has been active since May last year, with users previously duped into downloading the malware with a fake version of an adult app — but now those behind Triout have altered their tactics, distributing the malware with a re-purposed version of a legitimate privacy tool that has been ripped from the Google Play store.
The app in question here is the alluringly titled Sex Game for Adults, which was available to download via the Google Play Store in 2016. Although Sex Game for Adults has since been removed from the Play Store, it is available via various third-party app marketplaces.