“Ransomware” changes Android unlock data – Computerworld Portugal

The Porn Droid get administrator access and change entry codes on the device

<-.! .post-summary ->

ESET researchers found a type of malware that changes the unlock codes devices Android and asks for ransom to restore the normal state of the machine. For most users, the only option to get rid of this “ransomware” is back to the original factory settings, but erases all data on the device.

Malware calls himself, “Droid Porn” and advertises itself as a pornographic content viewer. It was only detected in Android applications markets of third parties or pirated software forums, caveat Lukas Stefanko, ESET malware analyst.

Once installed, users will see a fake FBI warning accusing them of seeing “prohibited pornography.” And so it requires the payment of a fine within three days.

Stefanko wrote that the malware uses a new method to obtain the degree of device administrator. Asks people click in order to activate the viewer application button, but behind that window, is another button for setting device administrator privileges.

Porn Droid is also prepared to try to close three antivirus mobility:. Dr Web, Mobile Security ESET and Avast

If someone tries to disable administrator privileges, the malware uses a called function Return to reactivate them, explains Stefanko. The “ransomware” is also prepared to try to close three antivirus mobility:. Dr Web, Mobile Securit, ESET y, and Avast

More experienced users to manage devices can successfully eliminate the Porn Droid, without reset and erase all data from your phone. But you must have access privileges to the “root” of the device, says Stefanko.