All news
Android.ZBot banking Trojan uses "web injections" to steal confidential data
The Trojans designed to steal money from bank accounts pose a serious threat to Android users. The Android.ZBot Trojan is one of these malicious programs. Its different modifications target mobile devices of Russian users from February 2015.
Mobile threats
Android adware “sets up” other programs
Mobile advertising has long become one of the main sources of getting revenue. However, this way of money making is interesting not only for honest software developers but also for virus makers. Android.Spy.510 is one of the latest Trojans detected by Doctor Web specialists. It installs an unwanted program module on Android mobile devices. The module displays advertisements on top of the majority of launched programs.
Mobile threats
Dr.Web Security Space for Android can now remove rootkits
The majority of known Android Trojans are, in fact, simple malicious programs that can be identified and removed not only by anti-virus software but also by ordinary users who have some basic IT knowledge. However, lately, Doctor Web security researchers have started to detect more and more malicious programs that attempt, for example, to acquire root privileges and install on compromised devices other Trojans, adware and unwanted programs which are much harder to detect and remove.
Mobile threats
Banking Trojan for Android asks for your vote in photo contest
Since cybercriminals persist in showing their interest in mobile banking, it is no wonder that Doctor Web security researchers continue to register activity of new banking Trojans targeting Android devices. This time, our article will be centered around yet another representative of the Android.BankBot family detected by our specialists.
Mobile threats
Trojan disguising itself as an anti-virus utility
TV series fans are often interested in news about their favorite characters and actors. Cybercriminals distributing malicious programs sometimes use this interest for their own purposes. Doctor Web security researchers have found Trojan that, among others, targets fans of one of the popular Russian series. This malicious program disguises itself as an anti-virus utility created by a well-known developer.
Mobile threats
Dangerous Trojan hiding in official Android firmware
Usually, to infect Android mobile devices, cybercriminals use a rather trivial routine—by employing social engineering methods, they force their victims to install some malicious application by themselves. However, this algorithm is not the only one virus makers have at their disposal—in particular, Doctor Web security researchers continue to register new cases when Android Trojans are already preinstalled on mobile devices as system applications to perform their malicious activities without user knowledge.
Mobile threats
Cybercriminals continue to steal money from Android users
For many years, cybercriminals continue to employ malicious programs that can send SMS messages to premium numbers without user knowledge as one of their most favorite methods of generating income. However, growing popularity of online banking applications has allowed virus makers to use more “advanced” Trojans for their attacks. In particular, Trojans that belong to the Android.SmsBot family and can steal money from bank accounts of mobile devices' users fall into this category. In this article, we would like to talk about one of such Trojans detected by Doctor Web security researchers.
Mobile threats
Yet another Android Trojan spies on Chinese users
Recently, Doctor Web security researchers have detected and examined a new Android Trojan named Android.Backdoor.260.origin . This malicious program is distributed among Chinese users and is intended to spy on its victims. In particular, the Trojan can intercept SMS messages, record phone calls, track GPS coordinates of the infected device, take screenshots, and even collect data entered by the user.
Mobile threats
1.5 million users may be affected by dangerous downloader Trojan for Android
Even though Google Play is an official Internet recourse that hosts applications for Android devices, it can still become a home for potentially dangerous or malicious programs. This week, one of suchlike programs was detected by Doctor Web security researchers.
Mobile threats
Trojan for Android downloads malicious applications in the guise of incoming messages
Doctor Web security researchers have detected yet another Trojan for mobile devices designed to display fake SMS and email message notifications and to make users download malicious software. Due to the fact that these notifications resemble real ones, users are very likely to be deceived and, as a result, install some dangerous applications on their mobile devices “sponsoring” cybercriminals.
Mobile threats
Distributers arrested but attacks of Banking Trojans continue
Doctor Web security researchers have discovered new versions of Trojans belonging to the Android.BankBot family that carry out attacks on bank customers in many countries. Some modifications of these Trojans known under the name of Svpeng can steal money from bank accounts of Android devices’ owners and terminate the work of numerous anti-virus programs.
Mobile threats
Applications with aggressive advertising module have been detected on Google Play
Doctor Web security researches have detected numerous Google Play applications containing an advertising module. The module incorporated into these applications serves to display aggressive advertisements and monetize free software. Once these applications are installed on Android tablets or smartphones, users can fall victim to annoying advertising messages that eventually make working with a device difficult.
Mobile threats
Trojan targeting Android devices acquires root privileges to perform its malicious activity
Doctor Web security researchers have discovered a dangerous Trojan for Android devices. This malware tries to acquire root privileges to stealthily download, install, or remove applications upon cybercriminals’ command. Moreover, this malicious program gathers detailed information about the infected mobile device and sends it to the virus makers. In addition to it, this Trojan can display annoying advertisements.
Mobile threats
Dangerous Android Trojan “hides” from anti-viruses
Doctor Web security researchers have examined a new multi-purpose Trojan for Android mobile devices. Upon the intruders' command, this malicious application can steal all sorts of confidential information, send SMS messages, make phone calls, and also perform a variety of other harmful tasks.
Mobile threats
Overview of handheld malware for 2014
Russian anti-virus company Doctor Web presents its 2014 overview of malware for handheld devices. The last year proved to be rather turbulent and rich in terms of information security events. We witnessed the emergence of a variety of new malicious applications for Android. In particular, the number of banking Trojans whose numerous modifications attacked devices in many countries increased significantly.
Mobile threats
A Doctor Web December review of virus activity affecting Android devices
Similar to previous months, December 2014 proved to be rather stressful for Android handheld owners. As usual, the makers of malicious applications didn't idle away their time and prepared a number of unpleasant surprises for Android users. Throughout the month, the Dr.Web virus databases were updated with new definitions for a variety of malicious applications, which included both regular banking Trojans and malware that was embedded in the firmware used by a number of Android-powered devices.
Mobile threats