An Android application that promises pornographic grace was secretly taking pictures of its members as they enjoyed the content of the app. The “Adult Player”, which actually is a ransomware then locking device of the victim and uses your photo in a ransom note demanding $ 500.
Discovered by Zscaler, the application can not be found in Google Play, due to the rules of the store, but is easily found with a quick Google search for this category of Android app. Your free pornography promise attracts unsuspecting users, and then apply the blow.
Once installed, the Adult Player asks for permission to monitor attempts to lock the screen. This is a red light that should make users give up immediately to use the service, but unfortunately many trigger the permission button, eager to find hot contents.
With the permissions you need, the application silently installs other background package, called “test.apk.” The reason for this is unknown, but Zscaler suggests that it might be “to get away from the static detection and analysis.” The app then checks if the device is equipped with a front camera, then take a picture. The malware then blocks the device and use the image to create a ransom note so that the device is released.
“The rescue screen is projected to remain persistent even on reboot, “says Zscaler. “It does not allow the user to operate the device and maintains the active screen for ransom message.”
Users do not need to pay to regain access to your device, though. It can boot in safe mode (see the manual of your device or search Google) that prevents the Adult Player to run. The user can then revoke the privileges app and uninstall it.
As usual, it is the tip of never install questionable sources applications, including volunteer content of this nature. It would be no surprise if there are many others that use this same strategy to profit from careless users. Traps ransomware type are becoming increasingly common. Last month, a trap type in emails that promised the installation of Windows 10.
was detected
No comments:
Post a Comment