Cyber defense body warns of new mobile virus targeting Android systems

The National Computer Virus Emergency Response Center said that it has worked with a laboratory to identify a new mobile Trojan virus targeting Android systems by masquerading as educational and training apps.

The center shared details about this virus on Friday through its WeChat account, advising users to download apps only from official platforms and to keep third-party security software active at all times.

According to the center, when a user installs and launches the fake educational app, it prompts them to grant permissions for background operations and accessibility services. Once these permissions are granted, the malicious program operates silently in the background while displaying a normal-looking interface on the phone.

Analysis reveals that this app is a new variant of a financial theft-oriented mobile Trojan virus. It has malicious capabilities that compromise users' personal information by intercepting text messages, stealing contact lists, passwords, activating the camera, recording the screen, and capturing audio. It can also spread further through text messages and social media apps.

The virus, disguised as an education app, features a user interface in Chinese, indicating it primarily targets Chinese users, the center said. With students on summer vacation, scammers might exploit themes related to summer training programs to distribute the Trojan via unofficial channels like SMS links, WeChat links, QR codes, and cloud storage services. This poses a significant threat to users' privacy and financial security, it explained.

In response, the center has urged users to avoid downloading apps from unofficial sources and to install and regularly update security software. Users should also be cautious with app installation requests and deny any requests for permissions like device administrator access, background operations, or accessibility services during installation.