Skip to main content

“HummingBad,” a new Android malware, has infected more than 10 million devices

Mobile Malware
Image used with permission by copyright holder
There is a new form of Android malware on the loose, and it is wreaking havoc. According to a detailed report from mobile security firm Check Point, HummingBad, a sophisticated bit of malicious code that emerged in February, has already managed to infect more than 10 million Android devices across the globe.

It is not your everyday, run-of-the-mill malware. HummingBad is the product of what Check Point describes as a group of “highly organized … Chinese cyber criminals that is working alongside multimillion-dollar Beijing analytics company Yingmob. It has serious developer muscle behind it: the HummingBad division, which bears the innocuous title “Development Team for Overseas Platform,” staffs 25 developers split into “four separate groups,” each responsible for maintaining the malware’s individual components. And Yingmob shares resources, including servers and the software certificates necessary to perform app installations, with HummingBad.

HummingBad infects primarily through “drive-by download,” or by installing itself on devices that visit infected webpages and sites. Its code, which is obfuscated by encryption, attempts to install itself on a given device persistently by multiple means.

The first, a “silent operation” that occurs in the background, is triggered every time the device boots up and its screen turns on. Hummingbird then checks to see if the device’s user account is “rooted” — i.e., has administrative privileges that can bypass security checks — and, if it is, it grants itself unfettered access to files and folders. Failing that, the malware attempts to root the device itself by running “multiple exploits” until it finds one that works.

But HummingBad has a Plan B, too: social engineering. The app pops open a window about an imminent “system update, which, in reality, is malicious code. If an unwitting victim permits the bogus “upgrade,” HummingBad connects to a remote server to download and launch additional applications. One nasty possibility? A keylogger that could “capture credentials and even bypass encrypted email containers used by enterprises,” wrote Check Point.

The driving force behind HummingBad’s development is profit, Check Point reported. Yingmob is currently generating $300,000 per month — $4 million per year — in fraudulent ad revenue. But the group, if it chose, could decide to pursue a far more nefarious purpose: the sale of personal data on infected devices.

HummingBad has gained its largest footholds in Asian markets. More than 1.6 million of the infected devices reside in China and another 1.35 million in India. That compares to 288,800 in the US. Collectively, Yingmob’s suite of malware now reaches 85 million phones and tablets and is now autonomously installing more than 50,000 apps a day, according to Checkpoint.

Google has yet to issue guidance regarding the detection and removal of HummingBad. We will update this story if it does.

Kyle Wiggers
Former Digital Trends Contributor
Kyle Wiggers is a writer, Web designer, and podcaster with an acute interest in all things tech. When not reviewing gadgets…
This is no doubt the best Samsung Galaxy Z Fold 6 pre-order deal
Samsung's unboxing of the Galaxy Z Fold 6.

If you want to be the very first to get one of the newest, greatest Samsung phones, you're probably pretty excited right now. That's because the Galaxy Z Fold 6 is coming out on the 24, which is just about two weeks away from the date this is being written. And that means it is pre-order season. When we explored Galaxy Z Flip 6 pre-order deals, we found a fairly robust landscape with a ton of best options for you depending on your carrier of choice. Unfortunately, though, the same does not apply for the more expensive Samsung Galaxy Z Fold 6. When looking at Samsung Galaxy Z Fold 6 pre-order deals we kept finding that Samsung itself was (usually) your best choice. Tap the button below to see the Samsung page and start making your order or keep reading below to see why other retailers are struggling to keep up the pace.

Why you should pre-order the Samsung Galaxy Z Fold 6 from Samsung
Pre-ordering the Samsung Galaxy Z Fold 6 from Samsung nets you a number of benefits. The first, which is largely superficial but won't fit in with the numerical arguments to come, is the fact that Samsung has reserved some color variations for their own shop. This includes the white and the special "Crafted Black" with a special textured exterior. Note that Samsung Galaxy Z Fold 6 cases are already out, however, so you can always just get a textured case if you want that feel. Also note that Samsung online exclusive colors are having a delayed shipment and aren't expected to arrive at your home until by August 7th, a full two weeks after launch.

Read more
Best Prime Day iPad deals: Air, Mini, and Pro starting at $180
The back of the Apple iPad Air (2024).

If you're thinking about buying any of Apple's tablets, you might as well take advantage of this year's Prime Day iPad deals. These devices, especially the latest releases, usually don't come cheap, which is why there's always high demand for discounts on iPads from Prime Day tablet deals. There are offers for both budget-friendly models and current-generation devices among iPad deals for the shopping holiday, so there's surely something here for everyone, and to help decide on what to purchase quicker, check out our Prime Day deals recommendations and buying advice below.
Best 10.2-inch iPad Prime Day deals

The 10.2-inch iPad, which encompasses the seventh-generation Apple iPad to the ninth-generation Apple iPad, are highly recommended models if you want a budget-friendly device that still has access to the conveniences of Apple's tablets. Their performance won't match those of the latest models, but they're still pretty decent devices by today's standards, and they're more tempting purchase because you can get them for even cheaper prices from this year's Prime Day iPad deals.

Read more
Out of all the Galaxy Z Flip 6 pre-order deals, I’d choose these three
Two Samsung Galaxy Z Flip 6 smartphones next to each other.

The Samsung Galaxy Z Flip 6 is days from being out. In fact, the only thing that is in the way of you getting one is making sure to pre-order. The phone, which will likely be included in our listing of the best flip phones as soon as we get more time with it (it's predecessor, the Galaxy Z Flip 5, is our current favorite) is officially launching on the July 24. What time we did get with the phone, expressed in our early Samsung Galaxy Z Flip 6 review, was very positive, with our review noting the good looks of the phone, including the absence of a noticeable crease. If you've had good experiences with Samsung's Galaxy Z Flip series and really want the sixth generation of the phone, pre-ordering is a great way to do so. Here are the three best ways to get a deal on a Samsung Galaxy Z Flip 6.

Note: Here, we're focusing on pre-order deals that largely pertain to unlocked Samsung Galaxy Z Flip 6 phones. If you want a phone locked to Verizon, T-Mobile, AT&T, or US Cellular, you may have other options, as outline in our comprehensive Samsung Galaxy Z Flip 6 pre-order guide.
Samsung offers more colors, better trade-ins

Read more