Android Trojan Hides On Phones, Steals Data, Inflates Phone Bills

As per F-Secure, a new Android Trojan named ADRD has been found in the wild. This Trojan has been concealed inside repackaged wallpaper-related applications hosted by a Chinese provider.

This Trojan once installed, will start to execute at every start-up and interferes with data connections. It can also access SD card as well as APN settings. It then sends the phone's info including IMEI and SIM ID to a remote host. Researchers have also detected a self-updater component, which can be downloaded and executed.

Here is an example of an infected application

An example of an infected application

An installed application infected with ADRD may show these permissions

An installed application infected with ADRD

Help Us Grow

If you like this post, please share it with your friends.

You are free to copy and redistribute this article in any medium or format, as long as you keep the links in the articles or provide a link back to this page.

Subscribe to our mailing list