Millions of Android phones compromised with pre-installed malware

Android mobile devices are known to harbor malicious apps, adware, spyware and fleeceware on the Google Play Store. However, hackers are increasingly targeting pre-installed apps on mobile devices to commit crimes, and researchers are warning of this growing trend.

Millions of affordable Android phones come with tons of pre-installed apps, and hackers only need to subvert one. Unfortunately, removing this type of malware is significantly more challenging than dealing with rogue apps that find their way onto the Play Store.

Malicious developers take advantage of loopholes in Google's app verification process to build apps that steal login credentials or fleeceware that extract up to $400 million a year from users by tricking them into signing up for expensive subscriptions on application.

So there was evidence?

Trend Micro researchers are warning about the growing trend of Android devices that come with malicious software pre-installed. Dealing with malware embedded in system apps or device firmware is a significantly more challenging task than removing an app downloaded from the Play Store.

The open nature of Android allows manufacturers to create a wide variety of phone models and reach price-conscious consumers with more affordable options.

However, this also opens the door for hackers to insert malicious code before these devices even leave the factory floor. This risk also applies to other Android devices, including smartwatches, tablets, set-top boxes and smart TVs.

Many firmware images analyzed by Trend Micro contained bits of code described as “silent plugins”. Researchers have discovered more than 80 different types so far, but only a few have had wide distribution.

The most popular ones are being clandestinely sold and promoted on Facebook, YouTube and various blogs. This new business model presents a major challenge for researchers, who are trying to find solutions to combat this growing threat.

What should be done to protect yourself from malicious apps?

Affordable Android devices offer users a wide range of phone models, smartwatches, tablets, set-top boxes and smart TVs, but also open the door for hackers to insert malicious code before these devices even leave the factory floor.

This risk is especially dangerous because malware preinstalled in system apps or device firmware is difficult to remove.

To protect against cyber threats, experts recommend purchasing the latest devices generation of trusted brands like Samsung and Google that are supposed to have better chain security supplies.

Furthermore, most mobile antivirus apps are ineffective against real security threats and are best not trusted. unless you want to end up like thousands of users who have downloaded password-stealing malware disguised as tools antivirus.