With so much sensitive personal and financial information on our phones today, the last thing we would want is for hackers to find a way to add a back door to your Android device. Well, a new Android malware The strain does just that and allows hackers to siphon off all kinds of valuable data.
As reported by BleepingComptuer, a new Android backdoor malware called “Wpeeper” is currently circulating online. So far, it has been discovered on two unofficial app stores where it is disguised as the Uptodown App Store which, as you may have guessed, is another third-party app store for the best android phones.
According to a blog post from Tencent security researchers XL Laboratory, the Wpeeper malware has already managed to infect thousands of devices. However, at this time, little is known about the true scale of the operation, as well as what exactly the hackers behind this malware use all the data it collects for.
Due to its extensive set of advanced features, Wpeeper is undoubtedly a new Android malware to watch out for. Here you’ll find everything you need to know about this new mobile threat along with some tips and tricks on how to stay safe. malicious applications that contains malware.
A backdoor to your digital life
It’s very rare that one comes across a new strain of malware, but Wpeeper appears to be just that after XLab researchers looked inside the APK file of a malicious app only to discover that it had no detections. VirusTotal.
Another thing that sets this malware apart from other strains is that it uses compromised WordPress sites to further hide communication between infected devices and command and control (C2) server operated by the hackers who created it. This may seem overly complicated, but it makes it more difficult for authorities to close the deal. Additionally, it is also more difficult to alter the way data is exchanged between a single infected Android phone and the C2 server.
Once Wpeeper malware reaches an Android phone, probably through a downloaded malicious app, it can retrieve information about the infected device, compile a list of all apps installed on it, download arbitrary files, retrieve information about specific files, and directories on the device, download files and run them, update malware, and even remove it completely to leave no trace that it was ever there.
We’ll probably find out more about the malware itself and what the hackers behind it are trying to achieve once security researchers start looking into things. Until then, however, there are still some steps you can take to avoid a Wpeeper infection.
How to stay safe from Android malware
To avoid getting a nasty malware infection on your Android phone, the first and easiest thing you can do is Avoid downloading apps total. Sure, it may be convenient and some apps must be downloaded to work, but most people will be able to find exactly what they’re looking for in first-party app stores like the Google Play Store, Samsung Galaxy Store, or Amazon Appstore.
The reason you don’t want to download apps is that they don’t go through the same rigorous security checks as apps hosted on official stores. As a result, malware embedded in these applications could easily go undetected.
From here, you’ll want to make sure you have Protect Google Play enabled on your Android smartphone. It comes pre-installed on most phones with the Play Store and is really useful in combating malware thanks to its ability to scan all existing and new apps you download for viruses. Likewise, you can also install one of the the best antivirus apps for Android for extra protection and extra features to help you stay safer online.
As long as people continue to download apps and use third-party app stores, hackers will likely continue to use both methods of app installation as a means to spread dangerous malware. That’s why it’s up to you to carefully examine and check every app you install on your smartphone. It can be tedious to do, but it’s better than suffering from a nasty malware infection or allowing hackers to install a backdoor on your phone.
- Google blocked more than 2 million dangerous Android apps from the Play Store last year
- FBI warns that scammers are using ‘free’ verification services to trick dating app users
- 2 Million Affected by Massive Debt Collector Data Breach: Full Names and Social Security Numbers Exposed
