He struck more than 45,000 devices, with the vast majority of the United States, India and Russia.
Back in March, security experts have begun to report the discovery of a dangerous virus xHelper. At first, it did not have the threat of large scale, because the malware spreads only through certain APK-files that are downloaded by users from untrusted sources.
The danger of this virus underestimated. Within five months after the detection of the number of infected devices they reached 32 000, and now the number has exceeded 45 thousand. By data Symantec, everyday infected 131 new smartphone or about 2400 per month. And the vast majority of the victims from the USA, India and Russia.
The scale of the ecosystem is not as significant digits, if not one "but" - the non-removable virus. After penetration to a smartphone xHelper separated from the source into a standalone application. If you remove an infected APK-file and installed the program, it will not help.
xHelper settles in the system and begins to show banner ads that refer to a variety of applications on Google Play. And this is just the lesser of two evils. Attackers can use a virus to a remote installation on a smartphone more dangerous viruses aimed at your bank card.
If we believe Symantec and Malwarebytes, then xHelper can automatically be reset after a complete reset! Some victims have reported the virus that does not help, even barring option to install applications from unknown sources.
Now experts are trying to understand the origin of the Trojan xHelper. There is a version that some smartphones it is present already "out of the box", it would explain its constant renewal. Is not recommended to download apps from unknown sites constantly update all system services and not to neglect antivirus.
see also🧐
- With Google Play, we found a "family" of 42 viral applications. Their downloaded over 8 million times
- The Android app virus is detected, the hidden costs of Internet traffic
- The experts found a Trojan in the popular Android-application to scan documents. Rather, it is removed