1M Devices Infected With Malware That Exploits Android Vulnerability

Security firm Check Point recently released data concerning a new malware infection campaign that has so far infected over 1 million Android devices. Devices become infected once they download apps that already carry the malware, which will then proceed to take advantage of the vulnerability of certain devices. Once infection sets in, those responsible for the campaign will gain control over the smart unit.

For those who have Android Nougat running on their smartphones, there’s no need to worry as the malware only infects Marshmallow and older, The Verge reports. However, considering how fragmented updating can be among the numerous carriers and smartphone brands using the Android OS has been, it’s not surprising that many are still running on Android Jelly Bean.

With this being the case, the devices are vulnerable to infections thanks to holes presented by the Linux kernel. This leads to others being able to take over the device once infection sets in.

The campaign itself is being called Gooligan and some of the apps that carry the malware include “Slots Mania” and other gaming apps that are especially popular in Asian regions. As for what the malware does after infection, it basically downloads apps without the permission of users, Android Police reports.

The rate of infection is worrying as well, at 13,000 devices affected every day. Aside from unauthorized downloads and installments of apps, the perpetrators also tend to leave reviews on the apps downloaded.

Right now, Google and Check Point are working together to address the alarming spread of the malware campaign, even coming up with a tool that directly counteracts the effects of the infection. Most of the apps that are known to be associated with the malware campaign have been removed from the Play Store, but caution is still advised as more apps are being added every day.