Be wary of new Trojans targeting Android devices

May 4th news: Hackers generally use cracked websites to infect PCs and control them as zombies, but according to professional mobile security company LookOut, they first discovered that hacked websites target mobile devices. LookOut has found that some hacked sites have a new Android Trojan called NotCompatible. If the user accesses the hacked/pirated website from the Android device, the Trojan will appear as a system update (the essence of which is to act as a TCP relay/proxy after the mobile phone is implanted).

The user's mobile web browser will then automatically download an app. Once the suspicious app finishes downloading, the device will pop up an install notification to let the user click to install the downloaded app. However, the device must preset the "Unknownsources" check to actually install the download application, otherwise the installation will be blocked.

LookOut said that although its current version of NotCompatible does not seem to be harmful, it may be used for malicious purposes. For example, if it turns an infected Android device into a proxy, it can invade the private network of the enterprise or government. According to a preliminary survey by LookOut, several websites have been identified as being stolen. However, the affected websites have relatively low traffic, so the overall impact on Android users is not expected to be high.

With the increasing popularity of mobile devices, it is conceivable that mobile terminals will become a new popular destination for virus Trojans in the future. Therefore, enterprises and government agencies must be alert to related security when using mobile terminals to realize the consumerization of their applications.