New Ransomware Affecting Android Devices

Today, technology continues to develop and advance at a very rapid pace. Of course, as technology advances, risks also develop accordingly. As we have told you many times, many people around the world to cyber crimes fall victim or fall into the hands of cyber fraudsters.

According to a new report published by Microsoft, Android devices are affected by a new type of virus is available. This virus is activated when the user presses the 'home' button. This type of ransomware works behind incoming calls and records conversations. It can even lock the screen, making it unusable for users.

New virus detected by Microsoft

The virus, called AndoridOS/MalLocker.B, hides on websites that appear suddenly and ask the user to download it. Even websites with third-party sites and cookies can also host the virus. MalLocker.B virus does not track or share users' data. What it does is that the user prevent him from accessing his phone It's happening.

When an application containing this virus is downloaded, a message appears on the screen in the form of a ransom note from the police or law enforcement. In the message, which is frequently used in our country, Your name has been involved in a crimeExpressions such as , you need to pay to access your phone again are used.

These types of frauds have been seen quite frequently not only in Turkey but also around the world in recent years. MalLocker.B It is one of the popular ransomware used for this purpose. Additionally, as time goes by, different techniques are used in such software.

How does MalLocker.B virus work?

When the virus infects the phone, the first thing that happens is blocking call notifications. In this way No information is visible about the identity of the person making the call. The entire area where the caller's information can be seen is closed with MalLocker.B.

The second thing that happens is that the 'onUserLeaveHint' function becomes disabled. This feature allows applications to run in the background. In addition, this feature is triggered when the user wants to push an application to the background and use another application. When the feature is triggered the user receives a ransom note and cannot log out of the application.

Although these two functions have not been seen by users so far, they have encountered ransom notes. To avoid such scams from third party websites and stores It is recommended not to download the application.