Android Users Targeted Again with Nasty Malware Tordow

Android users are again being hit with a malware attack. This one is Tordow v2.0. It was specifically created to Android devices and like Gooligan that was reported on a few weeks ago, it is also affecting users in Russia. However, this one is even more dangerous than Gooligan and also not likely to stay there for long.

Tordow makes its way onto Android devices via infected apps that are typically downloaded from unofficial sources rather than the app stores. It’s been seen in apps such as Pokémon Go and Subway Surfer available from third-party sites. In other words, they are sideloaded.  It also is possible that it’s making its way onto devices via social media phishing.

Once on the device, it will ask for root privileges that can allow it to take full control and perform tasks such as make phone calls, monitor texts, download more apps, steal login credentials, encrypt files on the device and hold them for ransom (ransomware), delete security software, and a variety of other things.

Always be aware of phishing, particularly on social media such as Facebook and Twitter. Because of the vast number of people who use those sites, malware can spread very quickly. Therefore, if you see an ad on those sites, make sure you can trust it before clicking it. You can hover over it with the mouse to see where the link takes you. If the domain (the part before the “.com” or “.net” for example), doesn’t make sense, it may not be wise to click it. Also, use a lot of caution with clickbait. Clickbait are headlines or images that are sensationalized in an attempt to get users to click them. One that is going around involves a supposed miracle diet product that Melissa McCarthy and Jessica Simpson used to lose a lot of weight. It says something like “You won’t believe this is what she did. It’s Genius! Her secret leaked!” In fact, they lost weight the old-fashioned way, which was by exercising and watching what they ate.

Sideloading is not recommended for any devices. When apps and software get placed into official app stores, they go through additional security testing before being allowed in. While this is not fool proof, it is less likely to result in those malicious apps making it to the end-users. So, always get them from those stores such as Google Play, Amazon, Blackberry World, and the Apple App Store.

Ensure you have security software installed on your devices and that it is always kept updated. Most have the option to automatically install those updates and if you are not great at remembering to check for them regularly, it’s best to just click that feature to the on position. Also keep the operating system updated with the latest versions. This applies to all devices, not just Android.

If you are looking at apps to install, take some extra time to research them to ensure they are legitimate and not malicious. This means check for ratings. If there are only a few, perhaps wait for the early-adopters to write more before putting it onto your smartphone or tablet. Also, if they all sound too good to be true, it’s likely that the app is also too good to be true. Trust your judgment on these things. If you have doubt, it’s better to do without.