Android malware infects 1M accounts globally

Android malware infects 1M accounts globally

Android Nougat statue at Google campus in Mountain View, Calif.

SAN FRANCISCO — A new variant of a well-known malware program has infected more than one million phones that run older versions of Google's Android operating system, mostly outside the U.S., a security firm reported Wednesday.

The malware, dubbed Googlian, is delivered via apps downloaded from non-approved, third-party app sites. That's made users outside the U.S., who are more likely to use these sites, more vulnerable. It affects an estimated 1,000 users in the United States.

"The Gooligan campaign most heavily affects Android users in Asia. That’s likely because users there rely more on third-party app stores. In the United States, Android users stick to Google Play for apps," said Check Point spokeswoman Ali Donzanti.

The malware campaign attacks phones running the Android 4 and 5 operating systems, known as Jelly Bean, KitKat and Lollipop, and according to Check Point Software Technologies, can potentially access information from users' other Google accounts.

The software is part of "GhostPush," a family of apps that once installed, try to download other apps. Google said that it has been tracking this family of malware since 2014 and so far has detected and prevented the installation of over 150,000 variations of Ghost Push.

Users who buy their apps on the Google Play store are generally safe, Check Point said.

Google said it has contacted affected users, removed apps associated with the problem and added new protections to its Verify Apps technology.

The problem is similar to an issue that surfaced with malware that could affect iPhones running non-Apple approved apps in 2015.

The moral of the story is that consumers should stick with legitimate sources for their apps, said Dimitri Sirota, CEO of BigID, a data protection company.

"The best policy for avoiding this type of unfortunate situation is to look at the reputation of the purveyor — buy your Gucci from a Gucci store, get your news from a publication with a reputation at stake and download your apps from certified stores like Google Play," he said.

Google also reminded users of Android phones to keep their devices up to date and thus secure.

" Because Ghost Push only uses publicly known vulnerabilities, devices with up-to-date security patches have not been affected," its blog post said.



Add Comment

all comments

  Other news

more
'Aging in place' tech helps seniors live in their home longer

'Aging in place' tech helps seniors live in their home longer..

24-Jun, 09:24

Home-based tech tools can be far less expensive than moving into an...

Coronation Street star Georgia May Foote takes relationship with model boyfriend George Alsford to the NEXT LEVEL with tear-jerking wedding photo

Coronation Street star Georgia May Foote takes relationship with model boyfriend George..

24-Jun, 09:01

Georgia May Foote has pledged her 'love' for boyfriend George Alsford in...

Jo Cox MP honoured with Commons plaque

Jo Cox MP honoured with Commons plaque..

24-Jun, 11:00

A coat of arms to honour murdered MP Jo Cox has been unveiled in...

London tower block residents 'must leave' says council

London tower block residents 'must leave' says council..

25-Jun, 05:56

The government plans to examine cladding from up to 600 blocks and so...

American held in Iran released on bail amid 18-year sentence

American held in Iran released on bail amid 18-year sentence..

03-Apr, 23:20

An Iranian-American serving an 18-year prison sentence in Iran for...

Markets Right Now: Early gain for stocks fades at midday

Markets Right Now: Early gain for stocks fades at midday..

17-Mar, 13:08

The latest on developments in financial markets (All times local): 12:00...

Trump says he's keeping Dr. Francis Collins as NIH director

Trump says he's keeping Dr. Francis Collins as NIH director..

06-Jun, 18:25

President Donald Trump says he's keeping Dr. Francis Collins as director...

George Clooney's dad shares details about the twins

George Clooney's dad shares details about the twins..

07-Jun, 13:12

Just two hours after George and Amal Clooney welcomed twins Alexander and...