- Author｜Wang Jialu
- Source｜Zhongguancun Online
- Release time｜2021-03-31
According to reports, foreign security researchers have discovered a new type of Android malware that pretends to be a critical system update that can completely control the victim's device and steal their data. The malware was found to be bundled in an application called "System Update" and must be installed outside of Google Play, the Android device's application store.
After the user installs it, the app will hide and secretly send the data in the victim's device to a server under its control. The researchers who discovered the malicious application said that once the victim installs the malicious application, the malicious software will communicate with the operator’s Firebase server for remote control of the device.
It is reported that the malware is likely to be part of a targeted attack. Inducing others to install malicious applications is a simple but effective method that can compromise the victim’s device. This is why Android devices warn users not to install apps outside of the app store. But many old devices cannot run the latest apps, forcing users to rely on old apps from pirated app stores.
