Skip to main content

Newly discovered Android virus can wreck your phone, cover its tracks

Mobile Malware
Image used with permission by copyright holder
Every week or so, there’s a new form of Android malware discovered that works in a unique way from what’s come before. Fortunately, in most cases, Google and third-party security experts identify the offenders before they do any serious damage. Kaspersky has just discovered one such Trojan, called Dvmap, located in an unassuming game on the Google Play Store called Colourblock with an unprecedented tactic — it injects code into the Android system library.

According to Kaspersky, this is the first example of malware on the operating system with that capability. Colourblock has reportedly been downloaded over 50,000 times, though Google took the game down after Kaspersky brought it to the company’s attention.

The danger of malware that overwrites contents in the system library in this particular instance is that it can disable Android’s Verify Apps function, allowing free, unchecked installation of downloaded software without the user’s knowledge or approval. By replacing the library, the Dvmap Trojan also eliminates key services that many apps rely on to operate properly. This means normally stable apps could very well start crashing your device.

Dvmap even deletes root access to cover its tracks. That’s particularly dangerous for apps dealing with sensitive information that rely on root detection to operate securely, like banking apps.

Kaspersky’s Roman Unuchek noted in his analysis that although the Trojan possessed the ability to download and execute files, it never received any commands during his investigation. This could mean that the developers are still expanding their reach and testing their methods before launching the full attack.

Interestingly, Colourblock has been able to sidestep action from Google and remain under the radar because the developers have been regularly “updating” the app by releasing a mix of clean and malicious versions. The first release was clean, but was then replaced with another containing Dvmap after a short period of time. That version was switched out with another clean app, and then again with an infected one. Kaspersky says the developers had performed the switcheroo at least five times between April and May.

Editors' Recommendations

Adam Ismail
Former Digital Trends Contributor
Adam’s obsession with tech began at a young age, with a Sega Dreamcast – and he’s been hooked ever since. Previously…
How to speed up your Android phone
Android tips feature image

Android smartphones are super fast these days, with high-end processors, RAM, and storage working together to make your smartphone experience snappy. Newer phones running the most updated operating systems like Android 9.0 Pie or Android 10 perform the best. RAM powers your phone's processor, so the more RAM, the better Android performance.

Over time, even the most well-equipped handsets may start to slow down as junk accumulates in the form of cached data, unused files and apps, screenshots, downloads, and other items you've lost track of. Keeping storage clear on your device and removing apps you don't use will help keep your phone running smoothly. If your device is over three years old, you may encounter performance issues regardless of how well you maintain your system.

Read more
Google has made its own camera app for the cheapest Android phones you can buy
google android go camera app

There’s no need to worry anymore about slow, unacceptable camera experiences on the cheapest Android phones you can buy. Google has announced Camera Go, its own camera app for the Android Go Edition software, which is used on ultra-low-cost smartphones around the world. The first phone to use Camera Go is the Nokia 1.3, announced alongside the Nokia 8.3 5G on March 19. and it’s a significant step in making it, and phones just like it, way more usable every day.

If you haven’t heard of Android Go Edition, it’s a spin-off version of Android, much like Android One seen on some Motorola and Nokia phones. Except it’s for even more affordable devices, while Android One has graduated to be used on more mid-range hardware. We like Android Go, because it stops cheap Android phones from only running hopelessly out-of-date versions of Android, which makes them slow, unattractive, and potentially less secure.

Read more
Ring allows undisclosed third parties to track you through its Android app
ring video doorbells free amazon echo show 5 doorbell pro

Amazon Ring’s Android app has been found to allow third-party trackers access to your data like your name, IP address, mobile network carrier, and more. 

The Electronic Frontier Foundation (EFF) published a report on Monday, January 27, about an investigation into Ring’s Android app. The investigation found analytics and marketing companies not mentioned in Ring’s privacy notice have access to your data directly through the Ring app.

Read more