Defend what you create

Other Resources

Close

Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

May 2015 Android malware review from Doctor Web

May 29, 2015

PRINCIPAL TRENDS IN MAY

  • Distribution of numerous banking Trojans
  • Emergence of new locker ransomware for Android
  • Emergence of new SMS Trojans

Number of entries for malicious and unwanted software targeting Android OS in Dr.Web virus database

April 2015May 2015Dynamics
7,9719,155+14.85%

Mobile threat of the month

May was marked by high activity of banking Trojans targeting users of Android devices and distributed by cybercriminals in a number of countries. For this purpose, virus makers extensively used unsolicited SMS messages containing a link to download one or another Trojan. For example, in Russia, cybercriminals used already known topics for their MMS messages. Among banking Trojans, spread by means of short messages, a number of Android malware belonging to the Android.SmsBot family were detected (in particular, Android.SmsBot.269.origin and Android.SmsBot.291.origin).

screen screen

Again, a large number of attacks with the use of banking Trojans were registered is South Korea; that is, in May, Doctor Web security researchers detected more than 20 spam campaigns organized by cybercriminals. The following topics were used for the messages:

screen

Malicious applications that performed the attacks

screen

Moreover, during the previous month, new banking Trojans belonging to the Android.BankBot family came into view. Despite the fact that the virus makers responsible for the creation of these Trojans had been arrested in April, distribution of this malware continued by other cybercriminals.

The number of entries for banking Trojans of the Android.BankBot family in Dr.Web virus database:

April 2015May 2015Dynamics
110119+8.2%

Android ransomware

May also experienced the discovery of new ransomware species of the Android.Locker family. These programs lock Android devices and demand a ransom to unlock them. The number of entries for these dangerous malicious applications in Dr.Web virus database:

April 2015May 2015Dynamics
227266+17.2%

SMS Trojans

During the previous month, Doctor Web security researchers detected a large number of new SMS Trojans belonging to the Android.SmsSend family and designed to send messages to premium numbers and subscribe users to chargeable services.

The number of entries for SMS Trojans of the Android.SmsSend family in Dr.Web virus database:

April 2015May 2015Dynamics
3,9004,204+7.8%

Protect your Android handheld with Dr.Web now

Buy online Buy via Google Play Free of charge

The Russian developer of Dr.Web anti-viruses

Doctor Web has been developing anti-virus software since 1992

Dr.Web is trusted by users around the world in 200+ countries

The company has delivered an anti-virus as a service since 2007

24/7 tech support

© Doctor Web
2003 — 2019

Doctor Web is the Russian developer of Dr.Web anti-virus software. Dr.Web anti-virus software has been developed since 1992.

2-12А, 3rd street Yamskogo polya, Moscow, Russia, 125040