Ransomware for everyone! Chinese malware developers have managed to develop a specialized Android app that allows anyone to create a fully functional ransomware for Android by filling out a form and pressing a few buttons.
The application is currently being advertised on Chinese underground hacking forums via Chinese networks and is offered as a commercial product, meaning that interested parties will have to pay a one-time fee to use it.
It was discovered by Symantec security expert Dinesh Venkatesan , but the app has been available since the beginning of the year.
Venkatesan says he has seen different ransomware being created by this app, which appears to create custom ransomware strains on the backbone of the well-known Lockroid family. This ransomware does not encrypt files, but simply locks the user's device with a PIN set by an attacker.
Venkatesan refers to this application as a TDK (Trojan Development Kit). Similar products have existed before, for malware targeting both mobile and desktop. But all previous applications required some coding knowledge.
This application requires no coding and works with a simple GUI. The application allows users to customize:
- The message that will appear on the lock screen
- The code to unlock the device
- The ransomware application icon
- Custom functions that change the code
- Animated images to use on the lock screen
The application produces a malicious APK file (for Android), but the user is responsible for finding a way to infect its victims.
While some believe the app is a scam, its long lifespan suggests otherwise, otherwise, its developer would have gained a bad reputation among the hacking community.
Venkatesan says the app is currently only available in Chinese, but he believes similar apps will soon appear in other countries.
Ransomware is extremely prevalent in China because the Play Store is blocked in the country and locals use third-party sources, such as forums and local Android app stores, to install apps.
