Android mobile ransomware that acts without encryption has been discovered by cyber security firm McAfee, noting the malware extorts payments out of its victims by threatening to spread private information.
Dubbed LeakerLocker, the ransomware lurks behind two apps on Google’s Play Store; Wallpapers Blur HD and Booster & Cleaner Pro, both of which are supposedly well-rated apps that have been downloaded thousands of times.
Google has been alerted to the threat by the McAfee Mobile Malware Research team and is currently investigating it.
“LeakerLocker locks the home screen and accesses private information in the background thanks to its victims granting permissions at installation time. It does not use an exploit or low-level tricks but it can remotely load .dex code from its control server so the functionality can be unpredictable, extended, or deactivated to avoid detection in certain environments,” explained McAfee’s threat advisory.
“Not all the private data that the malware claims to access is read or leaked. The ransomware can read a victim’s email address, random contacts, Chrome history, some text messages and calls, pick a picture from the camera, and read some device information.”
Once a payment is completed a message displays that the private information has been deleted from the cyber criminal’s servers.
However, McAfee suggests victims make no such payments: “We advise users of infected devices to not pay the ransom: Doing so contributes to the proliferation of this malicious business, which will lead to more attacks. Also, there is no guarantee that the information will be released or used to blackmail victims again.”
LeakerLocker may not be the most dangerous of ransomware but it certainly attempted to play on the paranoia people have developed around their personal information.
It also highlights that mobile malware remains a major threat to the Android platform, though Google is pushing to mitigate such threats with Android O.
Are you a security pro? Try our quiz!
Move to Elon Musk rival. Former senior executive at X joins Sam Altman's venture formerly…
Bitcoin price rises towards $100,000, amid investor optimism of friendlier US regulatory landscape under Donald…
Judge Kaplan praises former FTX CTO Gary Wang for his co-operation against Sam Bankman-Fried during…
Explore the future of work with the Silicon In Focus Podcast. Discover how AI is…
Executive hits out at the DoJ's “staggering proposal” to force Google to sell off its…
US prosecutors confirm earlier reports, demand Google sells off Chrome web browser and end default…
View Comments
Unfortunate its the fundamental design of Android that is at fault here, permissions should be required on a run time basis not on an install basis (but that is useful as an extra) - and should be switchable at any time per application - its fundamental security