New risk for its users Android που σύμφωνα με τους ερευνητές της Avast μια νέα παραλλαγή του κακόβουλου λογισμικού Fobus κυκλοφορεί μεταμφιεσμένο στην γνωστή επέκταση προγραμμάτων περιήγησης Adblock Plus. Η συγκεκριμένη επέκταση αποκλείει τις διαφημίσεις στον browser σας.
Many app developers Android offer their applications for free by incorporating ads in order to cover their costs and make some profit. These can of course be annoying, especially in games, which is why users are looking for an ad blocking tool.
Avast researchers who analyzed the new variant of Fobus report that except of the rights it requests and uses to connect the spyware it includes, the malware it is also extremely difficult to remove from the device.
With the administrator rights of the Android device it has acquired, it immediately deletes its icon from the screen and continues to run seamlessly in the background.
The first sign of the problem becomes visible right from the start when the list of permissions that your Android device requests is displayed. Requests include the consent to make phone calls and send messages to premium services. Of course, an ad blocking tool has no use with it.
Once fully installed on the Android smartphone, it will be very difficult to get rid of it because the authors have incorporated a strong defense for any kind of energy from the user.
Avast researchers report that when they tried to get their administrator rights to remove it, malware displayed a lock on the device screen.
"Fobus has a receiver that controls calls from device_admin_disable_request. When the user tries to turn off the device manager, this receiver catches the request and forces the device to lock the screen with a call to the lock mode. This feature does not allow the user to confirm deactivation. " he says Jan Alert's Avant.
Any attempt to unlock the screen is followed by a new screen lock from the malware if the confirmation window appears only for a very short period of time, which is not enough to prevent it with your finger.
However, if you're the "son or daughter of the wind" and catch it, you're presented with an intimidating message informing you that if you continue the process, all data on your device will be erased through a complete wipe. resets to the factory settings.
The threat, according to Sirmer, is not just a threat, as Fobus will only be removed when you manage to get the administrator privileges you have given him.
