Watch Out! New Android Malware: BaseBridge
With the increasing popularity of smartphones and tablets, attacks on such devices are practically the inevitable. BaseBridge is the latest malware to hit the Android platform. It has latched itself onto a number of popular Android apps: QQ Doudizhu, Voice SMS, Drag Racing, Trader, Donkey Jump, Jungle Monkey and Gold Minor to name few, and can be easily embedded into other legitimate apps. A rundown on what happens when an infected app is installed is as follows: the malware will ask users to upgrade it. If upgraded, malware will install itself on another area of the device under the name “com.android.battery”. After installing, user will be prompted to restart the app in order to run it. Once restarted, the malware is activated. Android is no newbie when it comes to malware attacks – DroidDream forced Google to take action and remove malicious apps from the marketplace. The same actions could be required for BaseBridge. Click after the break to find out the effects of the BaseBridge malware.
Upon activation, the Malware would activate three malicious services — AdSmsService, BridgeProvider and PhoneService — to communicate with a control server, from which it will download a configuration list to read related information and dial calls or send out SMS messages accordingly, incurring fees for the users. Meanwhile, the Malware also blocks messages from the mobile carrier to prevent users from getting fee consumption updates in time so that all malicious activities are undertaken stealthily without the user’s knowledge or consent. The Malware may also insert messages to the inbox of a mobile device at a designated time.
Unfortunately malware like this cannot be 100% prevented, but to reduce that risk, be smart when downloading multiple apps and remember to keep backups of important files in case you need to restore or whipe your phone.
via ubergizmo
Categories: Android, Android News
