By researchers, millions of Android new and threatening smartphone user a dangerous type of spyware detected. A Gsecurity company blog warned users of this virus in his post. The company uses the malware to trigger an infection. Android System Update disguised as “advanced” provided information about the new campaign.
Security company stating that Android System Update may actually be malware Android users, third party application before using their stores twice he states that he should think.
Malware disguised as Android System Update
According to the company to one device virus when you are infected, spyware It can record phone calls, take photos, access messages and much more. In addition, all the collected data is later a dedicated command and control (C&C) server through Android can be removed from the device.
New type of spyware Android System Update Unlike other forms of malware that collects information indiscriminately with malware, before collecting data specific events and actions emphasizes that it is designed to detect.
When spyware detects that a phone call is taking place, for example, the conversation is recorded and C&C an encrypted server ZIP can upload the file. Security company operators at the point of malware, “Extremely concerned about the up-to-dateness of the data” He states that there are other signs that it is happening.
The security company also explains that spyware will not use data collected before a certain period of time. The company expresses this issue as follows; “For example, location data is collected from GPS or network (whichever is newer), and if this last value is more than five minutes in the past, it decides to recollect and store location data.“
Finally, it is stated that the malware is scheduled to delete additional files it creates on the device immediately as soon as they are successfully installed, in order to avoid detection.