New malware is out for Android devices that, while posing as a system update, has far-reaching capabilities spyware, steals data from infected devices and is designed to be activated automatically whenever there is new information to export.
The new spyware can only be installed as a "System Update" application through third-party Android app stores, as it was never available in the Google Play Store.
This drastically limits the number of devices it can infect, as more experienced users are more likely to avoid installing programs from stores outside of Google. Malware also does not have a method of infecting other Android devices by restricting itself to one device.
However, if it manages to install it can collect and execute an extensive array of information on the command server and control. Zimperium researchers who located it, observed that "it stole data, messages, images and in the end took control of the Android phone".
“Once in control, hackers can record audio and phone calls, take pictures, control the record of the formerletterbrowsing, access WhatsApp messages and more".
Unlike other malware designed to steal massive data, new malware will only be activated when certain conditions are met, such as adding a new contact, new text messages, or new applications being installed. AThis means that it will only penetrate the most recent data, collecting location data created and photos taken at the last minute.
The malware will also display fake "Search for Update .." system update notifications when it receives new commands from its owners to cover its malicious activity.
