10 million Android phones infected by all-powerful auto-rooting apps

http://arstechnica.com/security/2016/07/virulent-auto-rooting-malware-takes-control-of-10-million-android-devices/

        Researchers from security firm Check Point Software said the
        malware installs more than 50,000 fraudulent apps each day,
        displays 20 million malicious advertisements, and generates
        more than $300 million per month in revenue. The success is
        largely the result of the malware's ability to silently root a
        large percentage of the phones it infects by exploiting
        vulnerabilities that remain unfixed in older versions of
        Android. The Check Point researchers have dubbed the malware
        family "HummingBad," but researchers from mobile security
        company Lookout say HummingBad is in fact Shedun, a family of
        auto-rooting malware that came to light last November and had
        already infected a large number of devices.

 - - -

The problem of unpatched devices still in wide use -- millions, 10s of
millions, or more in some cases, is a pervasive and difficult one.
Ultimately -- and this goes for all tech firms -- the question is what
responsibility exists beyond the relatively few years typically
specified for device update "end of life" -- when in reality so many
persons keep using these devices much, much longer (for economic or
other reasons).

--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren 
Founder:
 - Network Neutrality Squad: http://www.nnsquad.org 
 - PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein 
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently 
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir

Reply via email to