Top 10 mobile threats in 2013
1. Android.Adware.Plankton.A -13.39%
2. Android.Adware.Wapsx.A – 4.73%
3. Android.Trojan.FakeAV.B – 3.1%
Malicious Activity Top - January - August '13
0.68%
0.51%
0.76%
Android.Adware.Plankton.A
13.39%
1.19%
Android.Adware.Wapsx.A
1.38%
Android.Trojan.FakeAV.B
1.70%
3.10%
Android.Adware.Adwo.A
2.36%
Android.Adware.Kuguo.A
Android.Trojan.FakeApp.C
4.73%
Android.Trojan.SMSSend.CN
Android.Trojan.SMSSend.DL
70.20%
Android.Trojan.GingerMaster.DK
Android.Trojan.FakeInst.EJ
Other
Copyright@bitdefender 2011 / www.bitdefender.com
5/30/2016 • 2
Android.Adware.Plankton.A
• Piece of aggressive adware delivered via repackaged applications
• Collects phone numbers, call history, list of e-mails
• Features malicious behavior that allows a controller to install other apps
Copyright@bitdefender 2011 / www.bitdefender.com
5/30/2016 • 3
Android.Adware.Wapsx.A
• Android malware that steals information about phone capabilities
• Leaks contacts and e-mail addresses, building a database of people
• Sorts the information by phone number and device ID / IMEI
Copyright@bitdefender 2011 / www.bitdefender.com
5/30/2016 • 4
Android.FakeAV.B
• Malicious application discovered in June this year
• So virulent that it’s already in the top thee of all-time malware
• First application to attempt to lock the user out of their device
• Registers itself as Device Administrator to take control over the phone
• Collects hardware info, contact info, credit card details, location data
Copyright@bitdefender 2011 / www.bitdefender.com
5/30/2016 • 5
Other threats
SMS Sender malware
• Disguised as repackaged application, they send premium rate messages to
short numbers
Android.Trojan.DroidAp.A
• Attempts to root the phone using known exploits; if successful, it downloads
more code and adds the device to a mobile botnet
0-day exploits – Signature bypass
• Specially-packed APK that replaces digitally signed code with malicious code
Without voiding the APK’s integrity
Copyright@bitdefender 2011 / www.bitdefender.com
5/30/2016 • 6