Stubborn Android Trojan Finally Removed from Play Store

[legendguru]

BOOK INTERNATIONAL FLIGHTS TICKETS LOCAL FLIGHTS HOTELS BOOKINGS WORLDWIDE AND MORE AT CHEAPEST RATE EVER! CLICK HERE TO BOOK YOUR FLIGHT AND RECEIVE YOUR FLIGHT TICKET INSTANTLY

Loading...

A rather nasty Android trojan called Dvmap was found on Google Play. Thankfully, Google has removed it from the Play Store already.

Dvmap was discovered by Roman Unuchek, senior malware analyst with Kaspersky Lab, back on May 19, while looking at results from an internal system he monitors to find new strains of rooting malware. Unuchek informed Google of the situation on May 25, after running some more checks.

Embedded in a game called colourblock, which was marketed as the "simplest, challenging, addictive" puzzle game, the trojan was particularly nasty, having the capability of rooting an Android device and injecting malicious code into the infected device's system library.

Basically, once the app was installed, the trojan tried to gain root access by launching a start file which checked the version of Android the device was running, and tried to locate which library to inject its code into. If the operation was successful, the malware installed tools to connect the trojan to the C&C server.