This famous Android malware has become even more dangerous, be careful!

XLoader becomes even more intrusive with a new update that allows malware to begin data theft as soon as a corrupted application offered by SMS is installed on Android.

Piracy is a problem that is very difficult to deal with. Even using good detection software and exercising caution, it is possible to be fooled. The attackers compete in ingenuity to deceive the vigilance of their victims.

Malware is regularly updated to bypass new security measures or exploit new vulnerabilities. On the users’ side, we must be extra vigilant and not hesitate to do a little research to find information in case of doubt.

XLoader becomes even more intrusive

Developed for Android devices and in circulation since 2015, the XLoader (or MoqHao) malware has continued to be updated in order to remain effective. MacAfee teams recently noticed that the famous malware had further evolved, and that it had in fact become even more dangerous for Android users. Until then, XLoader came in the form of a perfectly normal-looking SMS. The latter invites targeted people to download a specific program, for example, dedicated to tracking a delivery.

If you followed this link, the program installed itself, and the data theft began when you launched the dedicated application. Now XLoader doesn’t even have to wait for you to launch said program. As soon as the software is downloaded, the malware begins its work. If the victim launches the application anyway, it takes on the appearance of Chrome, with a few strangely formatted characters, and prompts you to grant numerous permissions.

XLoader: what does it steal? How to protect yourself?

Over the years, XLoader has evolved greatly. Different variants of the malware exist, and it can now attack Android devices as well as systems using MacOS or Windows. Commendable, this malware is regularly used on smartphones to steal contacts, videos, photos, SMS and a large number of data directly stored on the device.

Very effective, it is continually updated and prevention currently remains the best way to cope. Android, however, plans to prohibit the installation of APKs if the system fails to control and validate a certain number of elements, but nothing has been done. Never download an application offered to you by SMS, even if it seems legitimate to you, and use the application store offered to you.

Also avoid clicking on the links provided unless you already know the sender. In the case of an attempted email attack, check the sender’s address and go to the official website of the brand concerned to compare. Also, do not hesitate to call on a loved one who is knowledgeable about this type of thing if you do not want to take the slightest risk.

Source : MacAfee