A malicious app has taken hold of 10 million Android phones around the world, and it is frightening. Tagged the HummingBad, the app hijacks your device, collects your data and makes it look like you clicked on ads that you did not click.
Discovered in February 2016, the malware rakes in about $300,000(N86m) monthly for its makers, who reportedly controls more than 85 million devices through various sham apps and other security threats.
HummingBad can also breach a phone’s security through repeated downloads when visiting sites. This is done until the phone is under the complete control of the group. If the incremental downloads do not work, users are given fake update notifications, which then download the data directly.
Luckily, Security Specialist at Checkpoint. has revealed some steps to determine if this malicious app has possesed your phone and how to get it off and secure your devices from future threats.
Are You Affected?
Cybersecurity companies have created software that can detect harmful agents on your phone and chase them away for you. It works a little like antivirus tool on your PC, by telling you some of the bad things apps do.
Just in case you own one of the millions of infected phones, you can get rid of it, by doing a factory reset on your device. But before you do that make sure you back up your files and contacts and write down your favourite apps
Alternatively, if you are a cybersecurity black belt with a specialty in malicious mobile apps, you could painstakingly remove it, said Dan Wiley, Head of Incident Response at Checkpoint.
Prevent Future Infection
Wiley gives some advice you should observe to keep this from recurring. Although not enough to prevent this from ever happening again considering the fact that hackers are so clever — but it is a good start.
Most Nigerians primarily buy their Android apps from the Google Play store, but for some, it is more common to chance it by installing apps from other sources. These do not have the same guarantees that come with apps that have gone through the Google vetting process, and can be shady. The biggest thing I could say is, do not download apps from untrusted stores, Wiley said.