
Probably, many representatives of the community have tried to play the most popular toy Angry Birds, including the version of Angry Birds Rio. The game is really made masterfully, so that it already plays many hundreds of thousands of people, including owners of Android-devices. As always, there were those who wanted to use the popularity of the application for their own purposes (no, not the creators of the game, but virus writers). The attackers began to spread a special Trojan through the “unlocker” of new levels for Angry Birds Rio.
The most interesting thing is that the program really works by opening the levels. But, in addition, it also downloads a malicious program called Android.Plankton onto the user's smartphone. The trojan reads the device data, transferring it to the creators of the virus, plus downloads “fellows” - malware with various functions.
')
By the way, the Trojan in the unlocker of the levels of the popular toy was found by the specialists of Doctor Web, who recently issued a warning. Unlocker, according to the company, was downloaded from the Android Market more than 150 thousand times, plus, of course, download it from other sources. The total number of downloads Angry Birds Rio Unlock already reaches a quarter of millions.
As mentioned above, the malicious program reads the device data ((device ID, SDK version, file privilege information) when the infected application is started), passing this information to the virus creators. Then, additional software is downloaded and installed in the background, which security, performs a variety of functions. By the way, the downloadable software can vary. Packages such as plankton_v0.0.3.jar and plankton_v0.0.4.jar have already been discovered, which later “hang” in the device’s memory, waiting for the command to be received and "Center".
Such is the danger, comrades players. Let's be careful, because "who is forewarned is armed," right?
Via
drweb.com