NQ Mobile announced its discovery of a unique new app-pusher form of malware called DyPusher.  We’ve seen other “pusher” types of malware before, so what makes this one different?  A couple things.  Stay with us here – it’s not as complicated as it seems.

You won’t see an icon for it because DyPusher’s disguised in your phone as a harmless system file, and it goes into action when your system’s booted. After uploading all the info about your phone to a remote server, DyPusher downloads “JAR” files to your mobile device’s system without your consent or knowledge. (A JAR file holds a number of files and resources in one place so that app software can be distributed on the Java platform.)

The job of DyPusher’s remote server is to compare your data with a list of installations, and to respond by sending back an encrypted string, which is actually a downloaded URL. DyPusher hides the string in a shared object file, decrypts it and — presto — a new app magically downloads itself from the Internet into your mobile device. 

There’s a lot more technological trickery involved, but what does it all mean for us? It means that this malicious thug, DyPusher, will download unwanted apps from the Internet into your mobile phone’

NQ Mobile Security users are already fully protected from DyPusher and other malware threats.  If you don’t have a powerful mobile security application on your phone, we recommend that you take the following precautions to prevent any damage from DyPusher (and other threats):s system without your knowledge or consent, causing excessive battery use and data flow consumption which, in some areas, can be expensive. Even worse, the malware steals your personal information, making it a privacy threat.

  • Only download applications from trusted sources, reputable application stores, and markets. Be sure to check reviews, ratings, and developer information before you download anything.
  • Never accept application requests from unknown sources, and closely monitor permissions requested by any application. An application shouldn’t request permission to do more than what it says it will do in its privacy policy.
  • Look out for unusual behavior on your smartphone, such as your device shutting down unexpectedly or displaying constant pop-up messages.
  • Download NQ Mobile Security for Android today to make sure you’re protected against mobile malware and other privacy threats.

Have unwanted apps appeared in your Android phone?  What were they?  What did you do about them?  Share your stories with us on our blog, or post your comments on our Facebook page.

Leave a Reply