Xamalicious lurks behind seemingly innocent apps
McAfee's Mobile Research Team late last month uncovered an Android backdoor named Xamalicious. This sneaky software, built with the popular Xamarin framework, hides in plain sight on your smartphone, potentially compromising hundreds of thousands of devices. Masquerading as harmless apps: Xamalicious lurks behind seemingly innocent apps like games, horoscopes, and health trackers. Once installed, it politely asks for accessibility privileges – a red flag you shouldn't ignore.
How these apps work
If granted access, Xamalicious connects to its remote command center, waiting for further instructions. This could involve downloading a more potent second stage payload, injected directly into your phone to grant it near-total control. Imagine someone secretly clicking ads, seeing your photos and installing dangerous apps on your phone that can control it remotely. That's what and more that Xamalicious can do.
How these apps hide
Built with Xamarin, Xamalicious camouflages itself within the app package, making it tricky to detect. It even updates itself and uses encryption to stay ahead of the game.
Start a Conversation
Post comment