Be careful where you plug in that Android device!

There have been Windows malwares ever since the OS was conceptualized, but fortunately most would stay leeched on to the affected system. Now a new strain of virus affects any Android device plugged into it also!

A few months ago it was the Android.Claco trojan. This type of malware worked the other way around. It would affect a Windows system from a compromised Android device. When the device connects via USB Mass Storage, the Windows AutoRun would automatically execute the malware.

And now time has come to affect the Android device. Symantec has spotted a new trojan targeting Android devices from infected Windows computers. The malicious payload is known as Trojan.Droidpak, a variant of an earlier  Android.Fakebank.B trojan. Once your Android device is connected to an affected system, ADB is used to install an APK that looks like the Google Play Store. Though it reads as ‘Google App Store’.

Google App Store

The app then searches the phone for specific Korean online banking apps. Once found, it instructs the user to delete the original app and install malicious versions. But that’s not all. It goes as far to intercept and reroute SMS messages, so that the bank can not contact and warn it’s users of the abomination.

Though this poses very little threat to those outside of Korea as of now, no one can say the virus will not migrate to other demographics. Probably the best way to protect yourself from threats like this is to not enable the “Install third party applications’ toggle. This might not guarantee you protection, (PlayStore is reported to have a few malicious apps) but it is always better to not install unknown APK’s.

Subscribe to 4CAST

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Join 23 other subscribers