Monday, April 9, 2012

Virus for Android change boot devices with root access

The security company American Mobile NQ discovered the first malware to be able to modify the Android operating system startup. The application was a variant of DroidKungFu, the virus that attacked owners of Android devices from version 2.2 and smartphones transformed into robots, so that attackers can perform any task remotely.


The variant, called DKFBootKit requires root access to work - this is why you should not give administrator privileges to any unknown application. The malware adds a code in the boot of Android, is copied to the directory / system / lib and modify Linux essential tools such as ifconfig and mount, responsible for controlling the network card and hard drive partitions, respectively.

The malicious application license illegally promised a premium version of ROM Manager software (very useful) that manages and installs the Android ROMs, and do a full backup of data from the smartphone to prevent the owner has a heart attack if a ROM become unstable the unit in a brick. The NQ Mobile, however, does not rule out changes to unblock paid versions of popular games, something that has happened in the past.

Not to suffer from the problem, it is common sense: do not install applications from untrusted sources and think twice before you touch the button Allow the Superuser application. After all, the amount of malware available to a system depends on the popularity.