Warning of Malignant Code
ESTsoft, a Korean application software development company, announced on December 24 that it discovered a new piece of malignant code that infects both computers and Android devices, advising users to be extra careful.
Any computer without the latest security patches can become infected with the malignant code by accessing a certain website attacked by hackers. After contaminating the PC, the code also infects any smartphone connected to the PC by forcing the device to download a malignant app. This app facilitates the leakage of personal information stored in the smartphone, and blocks incoming calls and messages. In addition, it replaces some online banking apps installed in the device with fake ones, and steals banking information that the user enters on the bogus banking apps.
The malignant code only compromises USB debugging-enabled Android devices. An official at ESTsoft said, “When a PC and an Android phone are not easily connected, users are often told to activate USB debugging mode,” adding, “So, more users than expected might be exposed to this attack.”
The official concluded by saying, “In particular, Android app developers should be more careful, since they mainly work with USB Debugging mode turned on.”