A new malware is said to be attacking thousands of smartphones all over the world each day, and it can access your personal data from your e-mails, pictures and much more. According to a Check Point Research report, the new Gooligan malware has already affected more than 1 million smartphones and is posing a grave threat. Check Point Research is a security firm, which said that the malware keeps attacking more than 13 thousand new smartphones every day.
Check Point Research in its blog wrote that the virus “steals authentication tokens that can be used to access data from Google Play, Gmail, Google Photos, Google Docs, G Suite, Google Drive, and more,” and it is a serious issue. The security firm is working with Google Security team in order to detect the source of the malware. Google’s director of Android security, Adrian Ludwig, in the blogpost said, “We’re appreciative of both Check Point’s research and their partnership as we’ve worked together to understand these issues,” he added, “As part of our ongoing efforts to protect users from the Ghost Push family of malware, we’ve taken numerous steps to protect our users and improve the security of the Android ecosystem overall.”
Check Point Research said that 74 percent of the devices in the market could be affected by the malware, an OS which geta generally activated are KitKat, Jelly Bean and Lollipop. More than half of such phones are in Asia itself. On their website, Check Point had put up the lists of apps which if downloaded, will infect your smartphone with malware. However, users can check if their account had been compromised or not, They can just access the following website that was created by the security firm- http://gooligan.checkpoint.com/.
In order to check for breach, the following steps are required: “A clean installation of an operating system on your mobile device is required (a process called ‘flashing’). As this is a complex process, we recommend powering off your device and approaching a certified technician, or your mobile service provider, to request that your device is ‘re-flashed’. Change your Google account passwords immediately after this process.
According to the blog, “Logs collected by Check Point researchers show that every day Gooligan installs at least 30,000 apps fraudulently on breached devices or over 2 million apps since the campaign began.” Gooligan has introduced a ‘malicious module’ on Google Play and then allowed it to steal data through emails, install adware, ranking rise etc.