The security vendor explained in a detailed analysis of the malware that apps were infected with Sockbot, which sets up a SOCKS proxy on each device and waits for commands from the author.
Symantec says the primary objective of the apps was to generate ad revenue, but if needed, the malware could easily turn the infected device into a member of a larger botnet allowing even for DDoS attacks.
Eight different applications posted on the Google Play have been confirmed as infected with Sockbot, and all of them have already been removed by Google. And yet, Symantec estimates that between 600,000 and 2.6 million devices have downloaded the infected apps.
Generating ad r... (read more)
Read more: Sockbot Malware Found in Eight Android Apps Published on Google Play
Last edited by a moderator:
