Kemoge mobile malware is active in more than 20 countries –If you are an Android user and have installed any apps like Talking Tom 3, Smart Touch, Privacy Lock, etc. then you should be concerned.
FirmEye, a security company, has identified a new mobile malware that threatens users in more than 20 countries around the world.
Kemoge, a malware targeting Android devices that can be installed via ads, is a real threat to your device's security. The apps are duplicates of legitimate software available on the Google Play Store; the only difference is that they attack the victim's device after they are installed.
In its blog, FireEye states, “The attacker uploads the apps to third-party app stores and promotes the download links via websites and in-app ads. Some malicious ad networks that gain root privileges can also automatically install the samples. Upon launch, Kemoge collects data about the device and uploads it to the ad server, and then spreads ads everywhere in the background. Victims see the ad banners at regular intervals, regardless of the activity they are performing on the device at the time (for example, the ads pop up even when the user is simply on the Android).”
Data such as the phone's IMEI number, IMSI, and device memory information are sent to the third-party server.
FireEye said, “Kemoge has self-maintaining features, and can even uninstall other software including anti-virus applications. Google has been made aware of this threat, and all users are advised not to download untrusted apps from third-party websites.”
FireEye advises Android users
- not to click on suspicious links that may be contained in emails / SMS / websites / advertisements,
- not to install apps from sources other than the official app store, and
- keep their Android devices updated.
