Ghost Push: One of the most prolific Android malware in the world is still the most widespread malware two years after it first appeared.
The trojan known as Ghost Push can infect all devices running Android up to version five, also known as Lollipop, and is still affecting around 57 percent of all users.
Ghost Push cannot run on Android version six (Marshmallow). It recently released version seven Nougat but is currently only installed on 10% of devices using Android.
Researchers from Cheetah Mobile report that most infections come from malware that enters systems from “pirated” installations and open source applications offered outside the Google Play Store.
“So far, this trojan family is responsible for most infections,” the researchers report.
“[The trojan] is able to root almost all versions of Android, except Android 6.0.
“The trojan also leverages SU files with many different parameters with which it is able to prevent third parties from gaining root privileges.”
Researchers continue to report that Ghost Push spreads through pornographic websites and deceptive advertisements.
Protection.
Users should update their mobile devices to the latest versions of Android, and as soon as possible with each new update that is released. Newer devices like Nexus and Pixels apply patches faster.
Those who have older devices that their manufacturers have abandoned and are not updating should consider using third-party ROMs, such as CyanogenMod and NamelessROM, which are updated frequently (on a weekly basis).
