Own an Android smartphone?
Hackers can secretly install malicious apps, games, and pop-up adverts on your smartphone remotely in order to make large sums of money.
Cheetah Mobile have uncovered one of the world's largest and most prolific Trojan families, infecting millions of Android devices.
Dubbed Hummer, this notorious mobile trojan stealthily installs malicious apps, games, or even porn apps onto victim's phones and yields its creators more than $500,000 (£375,252) on a daily basis.
"This Trojan continually pops up ads on victims' phones, which is extremely annoying," researchers wrote in a blog post. "It also pushes mobile phone games and silently installs porn applications in the background. Unwanted apps appear on these devices, and they are re-installed shortly after users uninstall them."
Even after the number of phones infected has declined, Hummer is still infecting nearly 1 Million new devices per day, making it the most widespread trojan family in the world.
Every time Hummer installs a new app on the infected devices, it's developers make 50 cents. Therefore, the group behind this Trojan is believed to be making more than half a million dollars (over $500,000) daily.
...and over $15 Million per month.
Here's How Hummer Work:
Once a device is infected with Hummer, the Trojan proceeds to root the phone to gain administrator privileges, which allowed it to discreetly install unwanted apps, games, porn apps as well as malware in the background.
These apps and malware end up consuming large amounts of network traffic, potentially affecting the victims with large bills from their Internet providers.
"In several hours, the trojan accessed the network over 10,000 times and downloaded over 200 APKs, consuming 2 GB of network traffic," the researchers noted.
Hummer is almost Impossible to Uninstall
The bad news for affected Android users is that Hummer is extremely difficult if not impossible to get rid of, because the Trojan takes control of the phone at admin level, making it impossible for traditional antivirus tools to uninstall Hummer.
The dangerous part: It is impossible to delete the Trojan through a factory reset due to the fact Hummer comes equipped with up to 18 different separate rooting exploits that allow it to root itself on a phone, the researchers said.
Recently, Trend Micro researchers also detected a similar threat known as Godless that came with Android rooting exploits, affecting 90 percent of all Android devices available in the market today.
Hummer spreads itself using a different number of domain names and third-party app stores, tricking users into downloading malicious apps or fake versions of popular apps like Facebook or Twitter.
The researchers claim to have traced the source of the Trojan family to an "underground internet industry chain" in China, based on an email address linked to the domain names used by the malware.
