Swift Cleaner  - LAQpc1515600434 - Swift Cleaner – Android Malware developed in “Kotlin”

An Open-source language “” has bee used to develop malicious apps that are capable of hijacking an mobile and as a similar malicious app called has discovered in Play store.

In May 2017 Google announced kotlin Programming language to Develop an Android and the Android team has seen more than 17 percent of Android Studio projects use Kotlin.

Giant Android apps such as Netflix, Pinterest, Twitter are the apps that using kotlin programming language.

The same language used a Malicious Andoird application called “Swift Cleaner” an android utility for cleans and optimizes Android devices found in Google Play Store.

This Malicious app capable of performing click fraud, execute the remote command, stealing the user information also sign up users for premium SMS subscription services without their permission.

- Figure 1 - Swift Cleaner – Android Malware developed in “Kotlin”


How the Malicious works – Swift Cleaner

Once user download and install this malicious app on their device, it collects the user device information and sends it across to its command and control server.

Later it starts background services that keep running for receiving a task from its command & control server.

This sending an SMS to a specific number that provided by its C&C server when user infect at the first time.

- Figure 2 - Swift Cleaner – Android Malware developed in “Kotlin”

Later the malware receives the SMS command, the remote server will execute URL forwarding and click ad fraud also this malware performing the Wireless Application Protocol (WAP) task by executing the remote command from C&C Server.

Accoirnding to Trend Micro, the injection of the malicious Javascript code will take place, followed by the replacement of regular expressions, which are a series of characters that define a search pattern. This will allow the malicious actor to parse the ads’ HTML code in a specific search string

It also performs some advanced functions such as uploading service provider information, CAPTCHA, and login information to C&C, by having that information it enables premium SMS service subscription at victim cost.

Common Defences On Mobile Threats

  • Give careful consideration to the permission asked for by applications.
  • Download applications from trusted sources.
  • Stay up with the latest version.
  • Encrypt your devices.
  • Make frequent backups of important data.
  • Install anti-malware on their devices.
  • Stay strict with CIA Cycle.

Source link


Please enter your comment!
Please enter your name here