Android root malware widespread in third-party app stores

Users should be cautious when downloading from app stores other than Google Play

Four third-party app stores for Android have apps with a malicious component that seeks root access to devices, according to Trend Micro.

The security company found 1,163 Android application packages containing the malware, which it calls ANDROIDOS_ LIBSKIN.A, wrote Jordan Pan, a mobile threats analyst with Trend. The malware obtains root access to the phone, the highest level of access and privilege.

The apps containing the component were downloaded across 169 countries between January 29 and February 1 from marketplaces called Aptoide, Mobogenie, mobile9 and 9apps.

"We have already contacted these stores and informed them about these threats, but as of this writing, we have yet to receive any confirmation from their end," Pan wrote.

Security experts have long advised that people steer away from third-party apps stores, which may not have the same quality control as Google's Play store. Google vets the apps that are allowed on its store, although malicious ones sometimes slip in.

The malicious component found by Trend is wrapped into legitimate applications, such as games or music streaming apps. The malware can download other apps to a phone without a user's knowledge, Pan wrote.

"These secretly downloaded apps will then present themselves as ads luring users to download other apps from time to time," he wrote. "It can also be used to collect user data."

When pop-up ads begin appearing, it's not clear to the phone's user what app is generating the ads.

"The popups lure users into clicking unwanted apps," Pan wrote. "Clicking on the ads may not necessarily lead the user to the respective app or site."

The malware also collects a variety of data, including the device ID, network, other apps that are running on the device and more.

Join the PC World newsletter!

Error: Please check your email address.

Tags PCtrend microsecurityGoogle PlayAndroidmalware

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Father’s Day Gift Guide

Most Popular Reviews

Latest News Articles

Resources

GGG Evaluation Team

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell

LIFEBOOK UH574

The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi

STYLISTIC Q702

The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott

STYLISTIC Q702

My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?