Μήπως είστε πελάτης του Amazon; Η company ασφάλειας Cheetah Mobile από την Κίνα, ανακάλυψε χιλιάδες μολυσμένα Android tablets που πωλούνται στο Amazon και έρχονται με προ-εγκατεστημένο κακόβουλο λογισμικό.
Η εταιρεία ανακάλυψε τη μόλυνση από τα δεδομένα τηλεμετρίας της εφαρμογής της. Μετά από περαιτέρω έρευνα των στοιχείων, εντόπισαν ένα Trojan which they named Cloudsota. In all cases, customers said they bought the tablets from Amazon.
Not accidentally, all devices had very bad reviews, as many discovered applications they could not remove, popup ads, and hijacked browsers.
According to her malware analysts Cheetah Mobile, Cloudsota is distributed pre-installed on tablets, with root privileges and very aggressive behavior.
Cloudsota can install other applications (usually malware or adware), remove security applications, change the browser's homepage, change the browser's search results, tablet wallpaper, display ads on animation startup, and more.
Cheetah Mobile reported that 17233 has so far detected infected devices and that this number could be much larger as it has been said to be able to remove security applications.
The researchers found over 30 different brands of tablets that had Cloudsota pre-installed, and all of them are still available in Internet. Στις μάρκες αυτές συμπεριλαμβάνονται Companies such as: Alldaymall Tablet, FUSION5, JEJA 7 Zoll, JYJ 7, Tagital, and Yuntab SZ Wave.
All of the above manufacturers are from China. Cheetah Mobile said it contacted everyone but none of the companies responded to their request for a comment.
