System Update Malware App (Picture: Zimperium zLabs)
The security firm notes that the installation (from the third party store), communicates with the malware operator’s Firebase server – which is used to remotely control the smartphone. The collected data is then organized into multiple folders inside the spyware’s private storage.
Android-powered smartphones are reportedly facing threats from a new malware in the form of a significant system update, researchers at mobile security firm Zimperium zLabs found. The new ‘advanced’ malware is capable of stealing personal data such as text messages, pictures, contacts and more. This Android smartphone is capable of taking full control of research firm Notes. In a blog post, Zimperium explains that hackers can remotely execute commands (remote access Trojans) and perform a wide range of malicious actions once the bug is taken under the control of the system. The bug comes bundled with an Android app called “System Update” which is to be installed outside of Google Play.
Talking more on the development, Zyperium CEO Sridhar Mittal told TechCrunch that the malware was potentially part of the targeted attack. “This is easily the most sophisticated we’ve seen. I think a lot of time and effort was spent in making this app. We believe that there are other apps in this way, and we are trying our best to find them as soon as possible.