It seems that every few weeks a new crop of malicious Android apps turns up in the market. Sometimes Google just removes them from the market; other times it uses the 'kill switch' to disable already-downloaded apps from Android devices around the world.
Typically these threats are perfectly ordinary-looking apps. Like the Trojan Horse of legend, they enter your device freely, with your permission. Once installed they do something nasty. Some users are shocked that Google can remove stuff from your Android phone remotely. I'm more alarmed at the ridiculous ease with which malicious coders can create Trojans for Android.
At last week's Next@Norton event, Symantec researchers presented a dazzling array of information about the current state of mobile security and the mobile malware landscape. Eric Chien, Technical Director for Security Response, revealed the absurdly simple steps a malefactor uses to create a brand-new Trojan by creating one right in front of the audience. Don't worry; his sample app never left the room.
You can later display these data on a webpage and a map. You can even let others create an account and let many people use this service, paid or for free. Ii, create a service and monitoring SMS, connect to the server once text message contains certain keywords arrive. Iii, hide from anti-virus apps or even kill them.
Android Cell Phone Virus
- Create a simple virus with NotePad that will delete local disk C. The source code below will allow.
- Shedun is a well-known type of Android malware software that made the list in late 2015.
Here are the five simple steps Chien demonstrated:
One. Start by downloading a free app. You can choose any app at all, but of course you'll want to pick something that will draw plenty of downloads.
Two. The language compilers that create applications on your PC take textual source code and convert it into assembly language that the CPU can read and process. It's a one-way translation; there's no way to go from the final executable file back to the source code. Android apps are written in Java, though, and that means that you can decompile them back to the original source code using simple, easily-available tools. For the next step, decompile your target app.
Three. The third step is a little tricky. You'll need to obtain Java source code that does something nasty, like sending personal information from the device to a third party. For the demonstration, Chien used a known threat called Android.Geinimi.
Four. Adding the Trojan code is absurdly simple. You copy it into the folder containing the existing source code, make a small change in the manifest to run the Trojan code before the rest of the app, and edit the permissions to give the Trojanized app free access to the entire device. While you're at it, tweak the app's name. Chien added 'FREE!' to the name for his demo.
Five. Compile the modified app and upload it to the market. You're done!
Of course, malicious apps don't last long in the Android Market. If you really want to spread a dangerous program, you're better off uploading it in China, where there is no official Android market. In fact, virtually all of the examples referenced in Chien's presentation surfaced in the free-for-all markets of China.
Not planning to do this yourself? Good! But I'm sure that like me you're shocked at how easily someone with bad intentions can create a brand new Android Trojan. It's time to look into mobile security for your Android device.
July 24, 2020
Save up to $65 on Norton 360 for first year*
Get multiple layers of protection for your Cyber Safety. Don't wait!
Does my Android phone have a virus? Is it infected with malware or a malicious app? Will my personal information be held for ransom? If you find yourself asking these questions, then here is some useful information about Android devices and antivirus apps that may help you.
Viruses and other types of malware
Malware is malicious software that can sneak onto your phone. Written with the intent to cause harm, malware can include viruses, computer worms, Trojans, ransomware, and spyware.
Cybercriminals can use malware to access your personal data and, in some cases, subsequently use that sensitive information to commit identity theft or fraud.
Viruses are a particular type of malware that infiltrate a computer or other device and their programs. A cybercriminal may be able to install a virus on your device without your knowledge or consent. The virus may then be able to insert new, malicious code on your device that can monitor and manipulate your online activity.
What can viruses and other malware do to Android phones?
Malware is designed to generate revenue for cybercriminals.
Malware can steal your information, make your device send SMS messages to premium rate text services, or install adware that forces you to view web pages or download apps.
Info stealers can steal your contact list, your personal information, your location, your passwords, and more.
With the aid of malware, cybercriminals can access your devices and steal your information for their own use or to sell on the dark web.
Hackers also use ransomware to lock devices and encrypt personal data. Then they can demand a ransom payment from the victim in order to regain access to their files.
Signs your Android phone may have a virus or other malware
Phones can be vulnerable to damage externally and internally. While the external damage is usually visible, internal damage is usually hidden from view.
Malware like viruses are known to perform repeated tasks that can take up resources on your devices. Signs of malware may show up in these ways.
- Your phone is too slow.
- Apps take longer to load.
- The battery drains faster than expected.
- There is an abundance of pop-up ads.
- Your phone has apps you don’t remember downloading.
- Unexplained data usage occurs.
- Higher phone bills arrive.
How to check for viruses and other malware on your Android phone
A good way to check for malware on your Android phone is to run an antivirus scan.
Before buying antivirus software for your phone, make sure you consider the most comprehensive product that’s available for your device.
There are many antivirus software choices available on the market. Some are free, and some are sold.
It’s a good idea to do your research to ensure the security software you invest in runs a complete scan and doesn’t overlook any vulnerabilities. An incomplete scan could give you a false sense of security when, in fact, your device could be vulnerable to cyberattacks.
Norton Mobile Security for Android is one product you might consider.
How to remove viruses and other malware from your Android device
If you think you have malware on your phone, it’s important to stop the malware from causing any further damage. Here are a few steps you can take.
- Power off the phone and reboot in safe mode. Press the power button to access the Power Off options. Most Android phones come with the option to restart in Safe Mode. Here’s how, according to Google, although Safe Mode can vary by phone: Press your phone's power button. When the animation starts, press and hold your phone's volume down button. Hold it until the animation ends and your phone restarts. You'll see “Safe mode” at the bottom of your screen.
- Uninstall the suspicious app. Find the app in Settings and uninstall or force close it. This may not completely remove the malware, but it could prevent further damage to your device, or from it transmitting the malware to other devices on your network.
- Look for other apps you think may be infected. There’s a chance that some apps may have been infected by the malware. If you think you can identify those apps, delete them immediately.
- Install a robust mobile security app on your phone.
Tips to help protect your Android device against viruses and other malware
Here are seven key steps you can take to help protect against future risks.
- Invest in and use robust security software to protect your Android device.
- Keep all operating systems and software updated with the latest versions.
- Don’t click on suspicious or unfamiliar links in emails and text messages.
- Use strong, complicated passwords or a password manager.
- Never use unsecure Wi-Fi connections. Always use a VPN when connecting to public Wi-Fi.
- Always use strong cyber safety protection on all devices that connect to the internet.
- Always install apps from trusted sources, such as the Google Play Store. Read the fine print and permissions on the apps to understand how much access you are giving the app developers.
It’s a good idea to not wait until your device gets infected. Make protecting your Android device a priority. Having good antivirus software that helps protect your PCs, tablets, and other Android devices could help prevent malware from spreading from device to device.
Save up to $65 on Norton 360 for first year*
Android Virus Protection Free
Get multiple layers of protection for your Cyber Safety. Don't wait!
How To Create A Virus Using Android Phone
Editorial note: Our articles provide educational information for you. NortonLifeLock offerings may not cover or protect against every type of crime, fraud, or threat we write about. Our goal is to increase awareness about cyber safety. Please review complete Terms during enrollment or setup. Remember that no one can prevent all identity theft or cybercrime, and that LifeLock does not monitor all transactions at all businesses.
How To Make A Virus In Android
Copyright © 2020 NortonLifeLock Inc. All rights reserved. NortonLifeLock, the NortonLifeLock Logo, the Checkmark Logo, Norton, LifeLock, and the LockMan Logo are trademarks or registered trademarks of NortonLifeLock Inc. or its affiliates in the United States and other countries. Firefox is a trademark of Mozilla Foundation. Android, Google Chrome, Google Play and the Google Play logo are trademarks of Google, LLC. Mac, iPhone, iPad, Apple and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Alexa and all related logos are trademarks of Amazon.com, Inc. or its affiliates. Microsoft and the Window logo are trademarks of Microsoft Corporation in the U.S. and other countries. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other names may be trademarks of their respective owners.