How does it work? According to AVG’s research, the malware takes over when you hit the power on/off key, and while it’ll still present the usual options and shutdown animation, the phone will stay on. Behind a black screen, the malware could enable the device to make calls, send out messages, or even access the camera app. All without your knowledge or permission.
While AVG goes into considerable, and very techy, detail about how the malware does all these things, but what we care about is the likelihood of PowerOffHijack being found on our own phones.
Speaking to VentureBeat, AVG said the malware is affecting Android versions up to 5.0 Lollipop, and around 10,000 installations have been tracked so far, with the majority coming from China. It’s apparently being spread through apps downloaded from stores other than Google Play, which isn’t accessible in China.
However, here’s some good news. The malware only affects phones that have been rooted, so anyone with a stock Android device running standard software – yes, that includes Google’s hardware like the Nexus 6 – is quite safe from the threat. If you’re not sure if your phone is rooted, then there is a very high chance it’s not, due to the complicated process needed to gain root access.
If you have rooted your phone, and are concerned it has picked PowerOffHijack up, then AVG says its own anti-virus software will detect it. Alternatively, it states the best way to ensure your phone is switched off is to remove the battery – which is all very well unless you own a phone where the battery’s fixed in place.
Editors' Recommendations
- Your Android phone is getting lots of fun new features this month
- Don’t update your Pixel phone — a new Android update might break it
- Google just announced 9 new features for your Android phone and watch
- These 80+ apps could be running adware on your iPhone or Android device
- Android 13 is here, and you can download it on your Pixel phone right now