A recent alarm launched by specialists at McAfee reveals an advanced and more insidious version of the malware Android XLoader. This cyber threat, which hides behind the appearance of Google Chrome, puts a strain on the security of devices around the world but also on the attention of users since it is very difficult to recognize. Here's how it works and the preventive measures suggested by experts. Previously we also talked about Octo malware and RatMilad malware.
Beware of XLoader malware on Android that hides well
The cybersecurity community is once again in the spotlight due to a worrying discovery: an even more dangerous variant of the XLoader malware. This threat, identified by McAfee for the first time in 2015 and attributed to the hacker group roaming Mantis, has shown significant evolution in its infiltration and damage capabilities.
Traditionally spread through deceptive messages inviting you to download a malicious application, the new XLoader malware has refined its attack mechanism. Once installed, the virus it no longer requires any action from the user to activate. Masquerading as Google Chrome, it asks the unsuspecting user for a series of seemingly harmless permissions, which however open the door to a series of malicious activities.
Among these, the virus can show phishing pages which simulate banking problems, pushing the user to enter their credentials on scam sites. Additionally, XLoader malware can perform a variety of remote controls, including accessing personal photos and messages, sending SMS to saved contacts, and downloading additional malware.
Although the picture is alarming, users are not completely defenseless. Experts stress the importance of keeping protection active Google Play Protect, available on Google Play, which offers a solid shield against such threats. Furthermore, Google has already started working on strengthening Android's defenses against XLoader in future versions of the operating system.
