App-installing malware downloaded by up to 14 million Android device users
At least 280,000 devices in the U.S. were affected
At least 280,000 devices in the U.S. were affected
At least 280,000 devices in the U.S. were affected
Malware that hijacked apps on Android-based smartphones was downloaded more than 14 million times across the globe last year. the adware corrupted at least 280,000 devices in the U.S. at its height of infection.
According to Tel Aviv-based cybersecurity firm , Copycat is "a fully-developed malware with vast capabilities, including elevating privileges to root, establishing persistency, and to top it all - injecting code."
How does it work?
Copycat disguises itself as a popular app found in third-party stores. Once it infiltrates a device, it gathers data, roots the smartphone and disconnects its security system. Copycat can gain control of the - the Android's app launcher - which allows it to record each app a victim opens or downloads.
The malware can send revenue earned from applications' pop-up ads to hackers instead of app developers. Check Point estimates that up to 4.9 million fake apps were installed on infected devices, producing up to 100 million ads. In 60 days, CopyCat pulled in more than $1.5 million and sent it to third-party criminals.
Cybersecurity experts at Check Point linked the attack to MobiSummer, a Chinese tech startup and app developer. It if the company was directly involved or a victim itself.
Devices with operating system Android 5.0 or older are still vulnerable to Copycat, which was most active in April and May 2016. Though all affected apps have been removed from the Play Store, Google believes could still be infected.
show that Android users are more likely than Apple iPhone users to download malicious apps. The Google-developed operating system is "more open and adaptable," according to security .
infected with malware are becoming problematic for Android app developers and consumers. As of last spring, an owned Android phones.