Newest Android Malware Allows Hackers to Control Your Phone

[dgstorm]

There's a new malware program for Androids on the prowl, and it's a nasty one. The malware "app" is a trojan called "DroidKungFu" and it allows hackers a backdoor entrance to your handset. With access the hacker can get your personal data, but can also gain full remote control of your Android, to make your phone do anything they want. This is evil stuff to be sure! It was found by some North Carolina State University researchers buried in some apps on Chinese forums and third-party software sites. Here's a quick quote from the PhanDroid article with some good advice,

Researchers at North Carolina State University discovered the malware, which has gone undetected by mobile anti-virus software thus far. The good news is you can do a lot to prevent yourself from picking up the bad apps. There is no word they have hit the official Android Market yet, so keep an eye on what you are downloading and only download apps from trusted sources and you’re already off to a good start.

Stay vigilant!

Source: PhanDroid

 

[OffWorld]

If you follow the source of the source link of the source link you'll find a little more detail:

In Android versions 2.2 (Froyo) and earlier, DroidKungFu takes advantage of two vulnerabilities in the platform software to install a backdoor that gives hackers full control of your phone. Not only do they have access to all of your user data, but they can turn your phone into a bot – and basically make your smartphone do anything they want.

Previously identified malware, such as DroidDream, has also taken advantage of these two vulnerabilities. But Jiang and Zhou think DroidKungFu is different because, based on early results of their research, it does a better job of avoiding detection by security software.

And, while later versions of Android have patched these vulnerabilities, they aren’t entirely secure. The security patches severely limit DroidKungFu, but it is still able to collect some user data – such as your mobile phone device ID number – and send them to a remote site.

The Abstract :: North Carolina State University :: Enter The Hacker: New DroidKungFu Malware Is Bad News For Androids

 

[tecwizrd]

Seems simple enough to keep this from getting to your phone. Just don't download apps that are not in the official market. Check each app for the permissions needed. Don't download anything from china.

Sent from my DROID2 GLOBAL using Android Tablet Forum