![\"\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/07\/Copycat.jpg\")
Researchers at the security firm Check Point have uncovered a new strain of malware they\u2019re calling CopyCat that has taken the internet by storm, infecting millions of Android devices in South and Southeast Asia, for now. This malware could easily break out into other parts of the world.<\/p>\n
Best estimates are that some 14 million devices have been infected over the last two months, with 8 million of those having been rooted. Those same estimates indicate that the software has generated more than $1.5 million in revenue from fake ads over that time period.<\/p>\n
Although it\u2019s not at all clear who owns and controls the software, there\u2019s strong circumstantial evidence that it\u2019s\u2019 being spread primarily via the Chinese advertising company, MobiSummer, because:<\/p>\n
\u2022 CopyCat and MobiSummer operate on the same server
\n\u2022 CopyCat and MobiSummer use the same remote services
\n\u2022 CopyCat has so far avoided targeting Chinese consumers, even though more than half the victims reside in Asia
\n\u2022 CopyCat uses several lines of code that have been signed by MobiSummer<\/p>\n
According to the researchers, \u201cIt is important to note that while these connections exist, it does not necessarily mean the malware was created by the company, and it is possible the perpetrators behind it used MobiSummer\u2019s code and infrastructure without the firm\u2019s knowledge.\u201d<\/p>\n
There\u2019s no evidence that the app has a presence on the Google Play store, so its spread has been a consequence of downloads from third-party app stores.<\/p>\n
Google has been notified and has already updated Play Protect to block the malware, but the rate of infection shows no signs of stopping, and it might be a while before this one burns itself out.<\/p>\n
It should also be noted that while most of the infections are in Asia, there are some 381,000 infected devices in Canada, and another 280,000 in the US, so tread carefully, especially if you\u2019re using an older, unpatched Android device.<\/p>\n","protected":false},"excerpt":{"rendered":"
Researchers at the security firm Check Point have uncovered a new strain of malware they\u2019re calling CopyCat that has taken the internet by storm, infecting millions of Android devices in South and Southeast Asia, for now. This malware could easily break out into other parts of the world. Best estimates are that some 14 million […]<\/p>\n","protected":false},"author":5,"featured_media":25446,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[34,30],"yoast_head":"\n