Doctor Web’s overview of malware detected on mobile devices in September 2016

September 30, 2016

The first autumn month appeared to be a quiet month in terms of information security. September was marked by the discovery of Android Trojans capable of performing injections into processes of system applications and launch malicious software.

Mobile threat of the month

In September, Doctor Web’s specialists detected modified Trojans belonging to the Android.Xiny family. They are able to covertly download and install malicious and unwanted applications on Android devices. New versions can now inject themselves into processes of system applications and launch malicious plugins. For more information about these Trojans, refer to the news article.

According to statistics collected by Dr.Web for Android

• Android.Banker.70.origin
• Android.BankBot.75.origin
  Trojans designed to steal login credentials in order to access online banking applications. It also steals money from the bank accounts of Android device owners.
• Android.Xiny.26.origin
• Android.Xiny.43
  Trojans that get root privileges, copy themselves into the system directory, and then download various applications without the user’s knowledge. The can also display annoying advertisements.
• Android.PhoneAds.2.origin
  A Trojan that delivers annoying advertisements.

• Adware.WalkFree.1.origin
• Adware.Airpush.31.origin
• Adware.Leadbolt.12.origin
• Adware. Batad.10
• Adware.Ewind.5

An unwanted program module that is incorporated into Android applications and is responsible for displaying annoying ads on mobile devices.

As before, attackers are engaged in ongoing efforts to compromise mobile devices by creating new malicious and fraudulent applications. Dr.Web for Android products can securely protect Android devices from malicious and unwanted software.