PRINCIPAL TRENDS IN NOVEMBER
- Unwanted Android adware activity
- Detection of a new dangerous Trojan for iOS
December 1, 2015
Number of entries for malicious and unwanted software targeting Android OS in Dr.Web virus database
| October 2015 | November 2015 | Dynamics |
|---|---|---|
| 15,135 | 16,070 | +6.18% |
Mobile threat of the month
In November, Doctor Web security researches detected an unwanted Android application designed for mobile advertising—Adware.AnonyPlayer.1.origin. It was distributed by virus makers with the help of Android.Spy.510 and was disguised as a program that should supposedly ensure a user`s anonymity. Once installed, Adware.AnonyPlayer.1.origin prompts the victim to allow it the use of Accessibility Service. If the malware gets such privileges, it immediately starts to monitor all the launched programs on the device. In case the Trojan does not find a program on a special list, Adware.AnonyPlayer.1.origin shows an advertisement on top of the opened application. It should be noted that the module starts performing its malicious activities not right after the installation but some time later. As a result, the user may think that it is the launched application that is responsible for annoying notifications, while Adware.AnonyPlayer.1.origin is clear of suspicion. You can find more information about this incident by referring to the review published by Doctor Web.
The number of entries for unwanted adware in Dr.Web virus database
| October 2015 | November 2015 | Dynamics |
|---|---|---|
| 230 | 242 | +5.22% |
Android ransomware
In November, security researchers detected a huge number of dangerous malicious programs for Android devices which block mobile system running and demand a ransom to unlock the device.
The number of entries for Android ransomware in Dr.Web virus database
| October 2015 | November 2015 | Dynamics |
|---|---|---|
| 524 | 588 | +12.21% |
Banking Trojans for Android
Last month, cybercriminals were still trying to steal money from mobile devices users` bank accounts by employing various banking Trojans. In November, Doctor Web security researchers detected five new malicious programs of the Android.Banker family, as well as three new Android.Banker modifications.
The number of entries for banking Trojans of the Android.Banker family in Dr.Web virus database
| October 2015 | November 2015 | Dynamics |
|---|---|---|
| 301 | 305 | +1.33% |
The number of entries for banking Trojans of the Android.BankBot family in Dr.Web virus database
| October 2015 | November 2015 | Dynamics |
|---|---|---|
| 148 | 151 | +2% |
SMS Trojans
Among the detected malicious Android applications, a large number of SMS Trojans were found. Such Trojans are dangerous, because they covertly send text messages to short premium numbers and subscribe mobile operators’ clients to chargeable services.
The number of entries for SMS Trojans of the Android.SmsSend family in the Dr.Web virus database
| October 2015 | November 2015 | Dynamics |
|---|---|---|
| 6,185 | 6,884 | +11.3% |
Protect your Android device with Dr.Web now
Trojans for iOS
In November, Doctor Web specialists detected one of IPhoneOS.Trojan.XcodeGhost modifications that was added to Dr.Web virus database as IPhoneOS.Trojan.XcodeGhost.8. This malware can gather confidential data about the compromised iOS device, display fake dialog windows in order to carry out phishing attacks, and automatically open links specified by virus makers.
