Trojan Root Android Device Bypasses Google's Security Mode on Google

This guide covers trojan root Android device bypasses Google's security mode on Google with practical context and easy-to-follow details. Use it to understand the subject and apply the information confidently.

The malicious code hidden in this app is so smart that it deceives Google's security mechanism, pretending to be a clean app, then replacing it with a poisoned version for a short time. Security researchers at Kaspersky Lab discovered that the new malware was released in the form of a Google Play Store game app, hidden behind the colorful block puzzle game that was downloaded at least 50, 000 times before being removed.

Named Dvmap, this Android root malware disables the device's security settings to install a third-party malicious app and inserts a malicious code and system runtime library device to gain root access. Phone.

"To overcome the security of Google Play Store, this malware creator used a very interesting method. They downloaded a clean app to the Store at the end of March 2017, then updated with the poisoned version in a short period of time, "the researchers said. "Normally, they will upload a clean version later on the same day. They did it at least 5 times between April 18 and May 15. "

How It Works Dvmap Malware

The Trojan works on both 32-bit and 64-bit versions of Andorid, once installed, it will attempt to gain root access to the device and install some modules on the system, including some written in Chinese. Together with standalone app named com. Qualcmm. Timeservices.

The root of the Android phone is in the puzzle game app

To ensure that the infected module can be run by the system, the malware overwrites the system's runtime library, depending on the version of the user's Android device. To complete the installation of the stand-alone app, the system's authorized trojan will turn off Verify Apps And adjust the system settings, allowing apps to be installed from third parties.

"In addition, it can give the com. Qualcmm. Timeservices app the Administrator Administrator administrative rights without user intervention, just by running the command. That's a very different way to gain administrative rights. " This third-party app will connect the infected device to the attacker's server, giving complete control of the device to the hacker.

However, researchers still do not know which Android device is infected with the command, so it is unclear what kind of file it is executing, but it could be an ad file or a poison.

How to Protect the Phone from the Dvmap Malware?

Researchers are still testing the malware, but users who have installed the game are advised to back up phone data and perform data reset to avoid malware attacks.

To protect your phone from such apps, always be cautious of untrusted apps, especially when downloading from Google Play Store. Remember to only grant app verification rights when the content is relevant to the purpose of the app. Don't forget to read the user comments section before installing. In addition, anti-malware apps on your phone can detect and block malware before they infect your phone.