Gang behind the Reveton/IcePol network moves onto Android

Security Roundup: Ransomware demands $300 from Android victims

This week we take a look at the Koler Android ransomware, F-Secure’s new digital freedom movement, and the top three spam sources.

Bitdefender has reported that the highly prolific gang behind the Reveton/IcePol network has made a move onto Android.

The malware, dubbed Android.Trojan.Koler.A, is delivered automatically to users browsing malicious pornographic sites. An application claiming to be a video player pops up, and if the user enables it to download, the Trojan can send the phone’s IMEI number to one of the 200+ domains known to be involved in the scheme.

Michael Sutton, VP of security research at Zscaler, reports that the Koler Trojan also demands a $300 ransom from its victims.

Both companies have stated that Koler can be easily uninstalled.

“The good news is that Koler.A can be easily removed by either pressing the home screen and navigating to the app, then dragging it on the top of the screen where the uninstall control is located, or by booting the device in safe mode and then uninstalling the app,” explained Bitdefender’s Catalin Cosoi.

In other news:
F-Secure’s Mikko Hypponen has launched a digital freedom movement at the re:publica technology conference in Berlin. The goal of the movement is to raise awareness of digital freedom and its fragile state in today’s society.

Kaspersky has revealed that the top three spam sources have remained unchanged from the previous quarter: China, the US and South Korea.

Check Also

QBS Technology Group Continues META Expansion with Maxtec

QBS Technology Group has completed the acquisition of South Africa-based cybersecurity distributor Maxtec. The acquisition …