• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Droppers

Dannydet said:
What is a dropper?
Click to expand...

"Malicious app developers have been using a surprisingly successful trick to sneak malware into the Google Play Store, and ultimately onto your phone. The method is performed using something called "droppers," which is a type of code hidden deep within an app that attacks a device with malware in multiple stages.
Droppers can be hard to detect, because they're basically coded into an app. It’s an infection. The dropper itself usually isn’t coded to cause any harm outright. Droppers get its foot in the door and over time downloads the malicious harmful malware to your device.

The reason why dropper deployment is growing is because they’re successful in quietly gaining access to your Android phone. The reason why they’re so successful is because they’re winding up regularly on apps in the Google Play Store.

Droppers essentially act as a trojan horse. When a dropper is coded into an app, it’s fairly benign. With nothing threatening or malicious in the original code, it makes it very difficult to detect. Its purpose at this stage is not to launch an attack on the Android device the app is downloaded to. It’s to gain access. When the app is submitted to the Play Store, Google runs security tests on the device and because the tests find nothing that would cause alarm on the app as-is, the application is usually approved and placed in the Play Store for Android users’ consumption.

Some Malware coders have been so savvy, they've added an additional layer of trickery when coding them. Timers are often added to space out the execution of the malware. Sometimes malware is deployed based on a person’s usage of or permission given to an app.

The existence of droppers dates back well before Android and Android-targeting malware. However, unlike a desktop computer, most smartphones don’t use antivirus software. Cybersecurity companies and research firms have been warning about the growth in use of droppers in the mobile market for some time now. For example, a report by Avast Threat Labs discovered that some Android devices, which are not certified by Google, manufactured by companies like ZTE and Archos, come pre-installed with malware deploying droppers."
 
Didn't install these type of apps in phone it's harmful for it. whenever phone show notification about security of phone like this app or apk may harmful for your device. Then don't download it.
 
The first link would have sufficed, since the other two are just copying it. And the answer is that it comes from a company called "threatfabric", since almost everything in the first article was quoted from them.
 
Ok... I read the first article... And its one of those that uses a lot of words to say very little... Maybe they hope that people will just notice the headline and not notice the lack of content.

Basically all it says is its possible to sneak malicious code into the app store... Its hard to spot... Google looks for those apps.. and removes them.
Its incredibly vague on number.. and based on other reporting is likely to be incredibly small.

Personally im more worried about annoying the norse gods... And being smited by a mjolnir...

Techinally theres nothing to stop me being hit by lightning... But at least google are actively working to stop vulnerabilities like this one
 
You must log in or register to reply here.
Back
Top Bottom