New malware is infecting Android devices with a dynamic that easily misleads users.
As if it were another notification advising of an update, this malware pretends to be a system update.
New malware infects Android devices
As mentioned by the security company Zimperium, this malware does not raise suspicion from users as it undergoes a legitimate system update. Users see a notification with the typical System Update message and only a matter of approving the supposed update so that it starts the process of infiltrating our mobile device to spy on us.
And the user will not notice anything, since the icon of the application drawer and any section of the device is hidden. One detail that they mention in the investigation is that it does not arise from a Google Play app, so this dynamic starts from an application downloaded from other media.
What power does this spyware have on the mobile? Take full control of the mobile, as mentioned in the Zimperium research:
Upon investigation, we discovered that it was a sophisticated spyware campaign with complex capabilities. [] The mobile application poses a threat to Android devices by acting as a Remote Access Trojan (RAT) that receives and executes commands to collect and extract a wide range of data.
Among the actions that you can perform on our mobile is taking pictures, recording phone calls, viewing bookmarks and browser history, reviewing WhatsApp messages, clipboards, monitoring the location, stealing phone contacts, among many others.
As you collect all this information, you upload all the content to the service as an encrypted file. And once this operation is completed successfully, it deletes any traces of the generated file from the mobile. A dynamic that is repeated continuously without the user noticing any indication of irregularity in his Android mobile.
