New Windows Malware Tries to Infect Android Devices Connected to PCs

[Venustus]

Content source

http://www.cio.com/article/746973/New_Windows_Malware_Tries_to_Infect_Android_Devices_Connected_to_PCs?taxonomyId=3089

"We've seen Android malware that attempts to infect Windows systems before," Symantec researcher Flora Liu, said Thursday in a blog post. "Android.Claco, for instance, downloads a malicious PE [portable executable] file along with an autorun.inf file and places them in the root directory of the SD card. When the compromised mobile device is connected to a computer in USB mode, and if the AutoRun feature is enabled on the computer, Windows will automatically execute the malicious PE file."

 

[Ink]

Scary thought for Android owners, but soon it will be coming to where you are.

Instead of updating through either Google's app store or directly from the bank, the malware will delete the app and install malicious copies of the bank apps that will monitor online banking activity and intercept and reroute SMS messages sent to and from the financial institutions.

Symantec said that this malware is unique due to the fact that it's moving from Windows to a connected device, instead of the other way around.

Advisory by Symantec.

To avoid what may be making its way through the pipeline with regards to this specific type of attack, Symantec recommends the following:

• Disable USB debugging when not in use.
• Avoid connecting mobile devices to public or unknown PCs.
• Install and make sure to keep updated mobile security software.

http://redmondmag.com/articles/2014/01/24/windows-malware-targeting-android.aspx