A few days ago a new malware for Android based on the well-known virus police how much he has given to talk about and that our colleagues from ADSLZone have reflected on numerous occasions. However, it seems that the creators of this malicious software have failed to fully protect the stolen data and the operation of their scripts.
We put you in the background. This variant of the Police virus for Android does not encrypt the data on the phone, but it is quite annoying and difficult to remove if we do not have an anti-malware program installed. The message displayed on the screen is on top of all the others, so we only have a few seconds to try to uninstall it. Interestingly, the Panda Antivirus team was studying one of these variants and discovered that it was connecting to a different server that was still active.
Taking advantage of this opportunity, they observed that cybercriminals made a mistake when configuring the server, leaving an open door through which they could access to verify that they had a MySQL database with information on payments, infections, etc., and some files with those who have learned how the server works. The operation is very similar to that of the original version of the virus: several scripts geolocate the device, they show the message in the local language and save the information of the infected devices to know exactly what is the success of the different infection campaigns.
This Trojan is capable of attacking users of up to 31 different countries but, What can we do if we have already been affected? You probably don't have an antivirus activated, so it can be a bit complicated since the annoying warning message appears every 5 seconds. In the event that you do not have time in those seconds to uninstall the malicious application, you will have to reboot the phone in safe mode. This is done in a different way on each mobile phone, although those with pure Android will see the option if they leave the power button pressed for two seconds.
After restarting the phone, we will see that we can uninstall the application without problems and, after this, we can restart the smartphone normally. In the event that your Android version is customized, you will only have to Google how to access safe mode. And you know, if you want to protect yourself from threats and malware, be careful and check our tips.
Via Panda Security