Just a few days ago we saw a malware Android which spread through an application on the Play Store. Google recently bragged on the success of its efforts to secure the Android platform and devices over the past year, mostly using one advanced machine learning technology. This, however, does not cover the apps acquired outside the Play Store and in fact the new malware that is "depopulating" comes from third-party platforms. Let's see in detail what it is.
New Android malware spreads using the name of Amazon or DHL: it asks to click on a link. Here's how to recognize it
This new Android malware called flubot is spreading rapidly like a real virus, reaching people via the smartphone address book for steal passwords. The way the malware works is not complicated and is based on an old-fashioned “Cadrega deception”. Victims receive a text message from a service of couriers, such as DHL or Amazon. The message includes a collegamento and a tip that says tap to install a service in order to track the package.
The problem is that this link download an apk from a platform unrelated to Google. Recall that by default Android never allows installation from unverified third-party sources, unless the user gives consent (and this is perhaps one of the worst things about the operating system). In any case once the apk is installed, steal password, Bank details and other sensitive information stored on the mobile device
But why is it called FluBot? Like the flu, this Android malware also examines the address book of the smartphone to send the same phishing message to contacts. This is how it is spreading rapidly. What to do if you have already been infected? Unfortunately, there is no solution other than factory reset the phone.
On offer on Amazon
Through | ZDNet
