Powerful new Android malware masquerading as a critical system update can take complete control of a victim’s device and steal their data.
The malware was found bundled in an app called “System Update” that had to be installed outside of Google Play, the app store for Android devices. Once installed by the user, the app hides and stealthily exfiltrates data from the victim’s device to the operator’s servers.