Android virus follows cottage machine to sea tens of thousands of daily infections

Jinshan Poison PA Safety Center recently monitored a very bad Android phone virus love the devil. It steals privacy, silently installs other applications, enforces or uninstalls the specified application, makes the user miserable, but extremely difficult to remove. The virus first appeared in the domestic mobile phone, has been spread to dozens of countries around the world, daily infection number of tens of thousands of. The analysis found that the Love Demon (Imogui) virus disguised as a mobile phone system service, hiding in a large number of mobile phones and parallel phone ROM. It also applies a large number of sensitive system privileges, which trigger the virus to run when a mobile phone user picks up/calls, receives/sends text messages, installs/unloads applications, and accesses/disconnects the network. After the virus is run, it will be like the devil. The user's mobile phone is controlled by the command of the remote server: Obtaining the sensitive information of the mobile phone, silently downloading other applications, silently installing other applications, forcing the start of the specified application, forcing the uninstall of the specified application, pushing the notification bar ad ... And because the love of the Devil's signature is consistent with the system's signature, it does not require user confirmation when doing these malicious acts. That is to say, users may suddenly discover that they have more or less apps on their phones without prior knowledge, and that mobile traffic is heavily consumed. Love the Devil has a good self-protection tricks. Because it is integrated in the cell phone ROM, the user must first obtain the cell root permission even if they find the problem to uninstall it. However, due to the complexity of the model, some of the cell phone root, will cause the phone to automatically restart or restart repeatedly, affecting the use. Therefore, security experts advise users to use the Cheetah cleanup master, without root, scan out the virus, choose to stop Disable. Android virus follows a cottage machine tens of thousands of daily infections in the world (TechWeb map) China is the first region to find and wreak havoc with the devil. Jinshan Poison PA Safety Center found that the virus used to obtain instructions for the server address: http://ps40.echiui.com:1337, after the query, the domain name hosted by the Beijing Zhongguancun IDC room. Surveillance shows that the virus infects thousands of mobile phones in the country every day through a vast cottage of Android phones and parallel-imports. Android virus follows a cottage machine to sea tens of thousands of daily infections (TechWeb map) At present, the love Demon virus has been exported overseas, with the Shanzhai Android phone, spread to dozens of countries and regions around the world. In addition to China, Jinshan poison PA Safety Center also monitored in Italy, Turkey, Indonesia, Russia, India, Spain and other countries, there are also a large number of Android phones infected with the virus. These phones are mainly shanzhai Samsung mobile phones, IPhone 4S, and so on, mostly using MTK chip.