Skip to content

Spyware

SpyFRPTunnel

aka fvncBot

A sophisticated mobile surveillance implant operating as a Remote Control System (RCS).

SpyFRPTunnel, also known as fvncBot, is a Android spyware.

Background

An advanced mobile spying implant that functions as a Remote Control System (RCS). What sets this family apart is its distinctive, multi-faceted communication design, which forgoes conventional HTTP polling. In its place it combines Firebase Cloud Messaging (FCM) for asynchronous command delivery with Fast Reverse Proxy (FRP) to build durable, NAT-bypassing tunnels, in effect converting the compromised phone into a server the attacker can reach.


Source: Malpedia (Fraunhofer FKIE).