New Android Trojan Spreads with Angry Birds Rio Unlock App

Probably, many representatives of the habrasociety tried to play the popular Angry Birds toy, including the version of Angry Birds Rio. The game is really made masterfully, thanks to which many hundreds of thousands of people are already playing it, including owners of Android devices. As always, there were those who wanted to take advantage of the application’s popularity for their own purposes (no, not the creators of the game, but virus writers). Attackers began to spread a special Trojan through the “unlocker” of new levels for Angry Birds Rio.

The most interesting thing is that the program really works by opening levels. But, in addition, it also downloads a malicious program called Android.Plankton to the user's smartphone. The Trojan reads the device’s data, passing it to the creators of the virus, plus it downloads the “brothers” - malware with various functions.

By the way, the Trojan in the unlocker of the levels of the popular toy was discovered by Doctor Web experts who recently published a warning. Unlocker, according to the specified company, has been downloaded from the Android Market for more than 150 thousand times, plus it, of course, is downloaded from other sources. The total number of downloads of Angry Birds Rio Unlock is already a quarter of a million.

As mentioned above, when a malicious application is launched, a malicious program reads device data ((device ID, SDK version, file privilege information), passing this information to the virus creators. Then, in the background, additional software is downloaded and installed, which, according to experts on security, performs a variety of functions. By the way, the downloaded software can vary. Packets such as plankton_v0.0.3.jar and plankton_v0.0.4.jar have already been detected, which later hang in the device’s memory, waiting for a command and . "Center"

. Such is the danger, fellow players Let's be careful, since "forewarned - is forearmed", right?

To Via drweb.com