Tech News #21

Loapi | This Cryptocurrency Mining Malware is Capable of Physically Damaging Your Android Smartphone

          Security researchers have discovered a new form of powerful malware that secretly mines cryptocurrency on a person’s smartphone, which can physically damage the device if it is not detected.

          Researchers at Russian cybersecurity major and anti-virus provider Kaspersky Lab have identified a new modular android malware dubbed ‘Loapi, which is capable of mining the Monero cryptocurrency.

          The malware works by hijacking a smartphone’s processor and using the computing power to mine cryptocurrency—the process of confirming cryptocurrency transactions by completing complex algorithms that generate new units of the currency.

          Loapi physically broke a test phone used to study the malware after just two days of the device being infected with it.

          The Kaspersky blog states, “Because of the constant load caused by the mining module and generated traffic, the battery bulged and deformed the phone cover.”

          This malware also pushes ads, automatically subscribes users to paid services, and conducts DDoS attacks, among other functions.

          The researchers state that the malware is distributed via advertising campaigns, disguised as an antivirus or a pornographic app. Once installed, the malware asks to grant admin privilege in a loop until it gets the power over the smartphone that you have.

           Once user grants admin privileges, Loapi checks for root permission and communicates with the module-specific command and control (C&C) servers, including advertisement module, SMS module and mining module, web crawler, and proxy module, for different functions to be performed on the infected device. It also locks the screen and closes the device manager, warning the user that the phone data will be wiped if they do not remove legitimate antivirus app installed on phone.

          Fortunately, Loapi failed to make its ways to Google Play Store, so users who stick to downloads from the official app store are not affected by the malware. But you are advised to remain vigilant even when downloading apps from Play Store as malware often makes its ways to infect Android users.

Subscribe My YouTube Channel - http://bit.ly/2x7HSsw
Like Our Facebook Page - www.fb.com/RubanTheGeek
Follow Us on Twitter -  www.twitter.com/ruban_thegeek