Weeks after the famous Flubot virus, new malware is lurking in the Android operating system. In this case, it is malware that masquerades as a system update, as security company Zimperium discovered.
According to the experts who discovered the malware, it’s a very sophisticated threat, a Trojan that can be accessed remotely and which allows full control of the device.
A fake update capable of controlling your mobile
System Update is an application distributed in third-party stores. The app promises improvements in our phones, but what it really does is request permissions and get full access to the phone, as already done by the SMS scam malware.
With Full Accessibility permission, any app can fully control our Android device
By giving complete checks, this malware will have access to all our contacts, to the call history, audio recordings, camera, location and more. In short, full controls to control our Android device at will.
The good news is that this app is not in the Google App Store, it must be installed from an external repository. In the same way, Google Play Protect will notify us if we try to install it. From there, we recommend that you never install (unless necessary and we know the origin of the APK) of apps that are not from the official Google app store.
Likewise, system updates always arrive via your mobile settings, so you don’t need to install anything from the outside. If you want to download an update file, it must always come from the manufacturer.
More information | Zimperium
