Android users are being warned about a malicious app that can reinstall itself after you delete it.
Researchers from Symantec have warned that the app, called Xhelper, has already infected over 45,000 devices in just six months, and is continuing to spread.
In a blog about it, Symantec researchers May Ying Tee and Tommy Dong wrote: “None of the samples we analysed were available on the Google Play Store, and while it is possible that the Xhelper malware is downloaded by users from unknown sources, we believe that may not be the only channel of distribution.”
Once the app has been downloaded on a smartphone, it can download additional malicious apps and flood the device will irritating adverts.
While most apps can be seen in the device’s application launcher, Xhelper is able to remain hidden, meaning it can’t be launched manually.
Ms Tee and Mr Dong explained: “Instead, the malicious app is launched by external events, such as when the compromised device is connected to or disconnected from a power supply, the device is rebooted, or an app is installed or uninstalled.”
– Keep your software up to date
– Do not download apps from unfamiliar sites
– Only install apps from trusted sources
– Install a suitable mobile security app to protect your device and data
– Make frequent backups of important data
Source: Mirror
