Actually, this is probably one of the biggest updates in the last 3 months; the GP didn’t cool down for a whole week, and just yesterday, as part of the traditional Sunday update, everything was finally wrapped up.
So what exactly is this ADEBE? — It’s an Android service channel. It’s used to install apps and tweak settings. We, in turn, use it to keep the phone running, even if the “mammoth” deletes our APK.
If the APK is deleted, it reinstalls itself.
If special features are disabled, we re-enable them.
If permissions are revoked, we grant them again in the background.
There’s also a freeze function that completely kills the app on the “mammoth’s” phone, which means you can disable any antivirus software and other nonsense, plus turn off biometrics if the phone’s settings allow it.
The connection isn’t made through the APK itself: even an empty phone without our APK can still see the panel, and the phone receives commands.
The keylogger and screen grabber now intercept everything without unnecessary overlays or other workarounds; ADB handles this as well—the system itself sends all taps and keystrokes to Android, and we simply capture them and log them in our keylogger
In short, as soon as the target opens the panel, the operator will need to open the ADB tab and manually enable developer mode for the device; after that, the auto-clicker will handle everything on its own. The only way to remove such an APK is via safe mode.
There are also updates to other features:
— Fixed an issue where logs would expire overnight
— Fixed crashes of the APK on the device itself
— Added support for auto-resolution on almost all smartphone models
— Fixed an issue with an infinite media project request in Mammoth
— Fixed bugs with overlays extending beyond the screen
— Fixed server-side errors related to the marketplace and the purchase of expired panels
— Fixed a bug with setting up a proxy from the Mammoth phone
— Added mobile web optimizations for certain tabs
