Installation of L3MON Spyware on Protesters’ Mobile Phones

Recently, reports have been circulating on social media indicating that security officials install spyware called L3MON on the phones of detained protesters after their arrest. Additionally, individuals from various cities have reported finding a small microphone placed in the top corner of their mobile phone screens, without having done so themselves or even knowing what it is.

This software poses a security threat to protesters; because after installing this software, the phone can be controlled remotely and becomes a spying tool.

In the first stage, real-time tracking becomes possible. At any moment, there is the ability to track locations that people visit or are currently passing through.

Immediately after installing this software on the phone, the entire contact list is copied to the control center server.

Why should you be concerned about your contact list being copied?

Imagine a contact you have saved in your contact list is also a friend of your friend who has been arrested. Ultimately, if you take an overall look at this data, you will realize that officials will discover all communications between your contacts and friends. They can also send text messages to your friends on your behalf without your knowledge.

The most important aspect of the hacks that were recently carried out was the hacking of notification services and SMS services.

Imagine that they have access to your SMS list at any time and can send text messages to your contacts and threaten them.

Your phone is a surveillance tool

There is the ability to record sounds around you and send them to a surveillance server. This is one of the most critical aspects of this software. So in the initial moments after retrieving your phone, refrain from making calls or talking to your friends.

What are the necessary steps after receiving a mobile phone from security officials?

Turn off the phone. When you are in a safe situation, turn on the phone and search for a package named l3mon.etechd.com in your phone’s background services list. If you find it or notice anything else unusual in the list, delete it immediately. If you do not have the necessary technical knowledge, give the phone in off mode to one of your technically proficient friends to examine it.

Please share this information with those around you so everyone is aware.

When they take away your freedom in the name of security, then you have neither security nor freedom