[Security] Loapi in the wild

[FlashD]

Nowadays, it’s all too easy to end up with malicious apps on your smartphone, even if you’re using the official Google Play app store. The situation gets even worse when you go somewhere other than the official store – fake applications, limited security checks, and so on. However, the spread of malware targeting Android OS is not limited to unofficial stores – advertising, SMS-spam campaigns and other techniques are also used. Among this array of threats we found a rather interesting sample – Trojan.AndroidOS.Loapi. This Trojan boasts a complicated modular architecture that means it can conduct a variety of malicious activities: mine cryptocurrencies, annoy users with constant ads, launch DDoS attacks from the affected device and much more. We’ve never seen such a 'jack of all trades' before.

Full article here.

A truly destructive trojan horse. So far the only way to remove it, is by factory resetting the device from the boot loader or re-flash the whole system (providing the battery survives long enough for the victim to spot the trojan).

[PictureGuy]

I update my security daily and run full scans 2-3 times a week.

You know, Kaspersky has gotten some bad press lately concerning a connection with the Russian government.

[Kaitou Ace]

That's a pretty scary little program to have to watch out for.