PC to phone

  • TECH
  • Monday, 03 Mar 2014

A malware has been discovered that can be transferred to an Android device when its connected to a PC.

AS MUCH as Google tries to filter out malicious content from its Play Store, there is still a growing risk of malicious content that can sneak into the device via its app repository. However, there are also other ways that an Android device can be compromised.

Symantec has discovered a new malware called Trojan.Droidpak which tries to infect Android devices once they are plugged into an infected PC.

The malware installs itself as a system service on a Windows PC, and then downloads a malicious APK (Android application package) file and other necessary tools.

After that all it requires is for an Android device to be connected to the PC for the malicious APK to be installed. For this to happen though it will require USB debugging to be enabled in the Android device.

Trojan.Droidpak will then set itself as a clone of the Play Store. It will appear in the app drawer with the same icon as the Play Store but bearing the name Google App Store instead of the usual Play Store.

It will then look for certain Korean online banking applications on the compromised device and, if found, prompts the user to delete them and install malicious versions.

The malware is also capable of intercepting text messages and forwards them to a server that is used to bypass the SMS authentication systems that is usually used by banks for online transactions.

Even though this malware only targets Korean banks at the moment, it could be replicated to work with other banks across the world.

It can also be used to load other types of malware.

As scary as this malware sounds, there are obvious ways to prevent it. First of all, USB debugging should only be enabled when necessary by those who know what they’re doing with their devices.

Next, you should protect both your Windows machine and Android device with reliable antivirus software. Also, be wary of connecting your Android device to an unfamiliar PC. — Donovan Quek

Related story:
Android under attack

Flappy Bird grounded, but may be dangerous
Article type: metered
User Type: anonymous web
User Status:
Campaign ID: 1
Cxense type: free
User access status: 3

Next In Tech News

Texting option weighed for upcoming ‘988’ US suicide hotline
Consumer Reports tricks Tesla to drive with no one at wheel
Leveling up: Embracer's acquisition spree takes it to top of European games business
Silicon Valley has the lowest office-vacancy rate in US
Retailer Rakuten beats Japanese lenders at digital banking game
Biden tax fears leave Bitcoin, Ether groggy
Facebook wants users’ responses to improve feeds
Various facilities turn Terengganu public library into book lovers sanctuary
What Elon Musk and Jack Dorsey are missing about Bitcoin and green energy
Google ethical AI group’s turmoil began long before public unravelling

Stories You'll Enjoy