live casino online

This Adware may be downloaded from app stores/third party app stores.

It drops and runs other files on the device.

Arrival Details

This Adware may be downloaded from app stores/third party app stores.

Mobile Malware Routine

This Adware drops and executes the following file(s):

• The "core" module of Agent Smith malware. It communicates with the C&C server to get the pre-defined list of infected applications.

It is capable of doing the following:

• It utilizes the Janus vulnerability to inject the ��boot�� module into the repacked application. After the next run of the infected app, the ��boot�� module will run the ��patch�� module, which hooks the methods from known ad SDKs to its own implementation.
• It exploits a series of ��Bundle�� vulnerabilities to install applications without the victim knowing.
• The 'AD' payload will display ads to the victims.