Long-running Android botnet evolves, could pose threat to corporate networks

[InfoSec News <alerts () infosecnews org>]

http://www.computerworld.com.au/article/560036/long-running-android-botnet-evolves-could-pose-threat-corporate-networks/

By Lucian Constantin
IDG News Service
20 November, 2014

An Android Trojan program that's behind one of the longest running 
multipurpose mobile botnets has been updated to become stealthier and more 
resilient.

The botnet is mainly used for instant message spam and rogue ticket 
purchases, but it could be used to launch targeted attacks against 
corporate networks because the malware allows attackers to use the 
infected devices as proxies, researchers from security firm Lookout said.

Dubbed NotCompatible, the mobile Trojan was discovered in 2012 and was the 
first Android malware to be distributed as a drive-by download from 
compromised websites.

Devices visiting such sites would automatically start downloading a 
malicious .apk (Android application package) file. Users would then see 
notifications about the finished downloads and would click on them, 
prompting the malicious application to install if their devices had the 
"unknown sources" setting enabled.

[...]



--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/