Russian security firm Doctor Web has discovered a new Android Trojan that helps hackers carry out Distributed-denial-of-service (DDOS) attacks. It is also capable of sending SMS messages according to commands it receives from the hackers who control it.
According to the report, the malware called “Android.DDoS.1.origin” is likely spreading through social engineering attacks and masquerading as a legitimate Google app, Google Play.
After installation, the malware creates an app icon that resembles the Google Play icon. If a user uses the fake Google Play icon, the Google Play app will launch normally, but in the background, malicious activity will also begin.
Once the malware has launched, it will send the victim's phone number to the hackers and then wait for further instructions, reports ehackingnews.
So hackers can launch DDOS attacks against any server by sending a message with commands containing the server's IP and port. After receiving the instructions, the malware starts sending packets to the specified address.
The malware reduces the performance of the infected device and the victim will get very high Internet and SMS bills.
