Versatile Android Malware Can Cause Physical Damage to Phones

Versatile Android Malware Can Cause Physical Damage to Phones

Cybersecurity firm Kaspersky Labs reported Monday on a new “jack of all trades” Android malware threat they’ve dubbed Loapi.

Cybersecurity firm Kaspersky Labs reported Monday on a new “jack of all trades” Android malware threat they’ve dubbed Loapi. According to Kaspersky Labs’ report, the malware is capable of multiple kinds of attacks and its workload can even physically damage a phone after a few days of being installed.

Loapi malware is installed via malicious apps, some disguised as antivirus solutions, that are available for download outside of the Google Play app store. After installation, the malware demands administrator rights, spamming the screen with notifications in a bid to get desperate users to give in and tap OK.

If users try to revoke device manager permissions, the malicious app locks the screen and closes the settings window. If users try to download actual protective apps, such as a real anti-virus app, Loapi declares them malware and forces the user to OK their removal.

The Loapi malware, once installed, can carry out many kinds of attacks. It aggressively displays advertisements on a user’s phone as well as using it as part of an advertising click fraud scheme. It can also use the phone as part of a DDoS attack.

Another module of the malware can sign up users to paid subscription services. Because Loapi also has SMS messaging functionality, it can confirm by text any subscriptions that require confirmation as part of sign-up, and all messages (outgoing and incoming) are immediately deleted. According to Kaspersky, the advertising and subscription sign-up features made 28,000 different requests in a 24-hour period.

Kaspersky discovered that the Loapi malware is set up with the ability to adapt to any new function its creators might want, such as ransomware, spyware or a banking Trojan.

In addition to these abilities, Loapi also uses smartphones as cryptocurrency mining modules, specifically to mine Monero tokens.  Cryptocurrency mining is such a processor-intensive process that 48 hours after Kaspersky’s test phone was infected, the battery overheated, expanded and burst out of the phone case.

To avoid installing malware on your Android device, Kaspersky recommends installing apps only from official stores, disabling the installation of apps from unknown sources, only installing apps that you really need and installing and regularly using proven anti-virus protection for your Android device.

About the Author

Jessica Davis is the Associate Content Editor for 1105 Media.

Featured

  • Survey: 54% of Organizations Cite Technical Debt as Top Hurdle to Identity System Modernization

    Modernizing identity systems is proving difficult for organizations due to two key challenges: decades of accumulated Identity and Access Management (IAM) technical debt and the complexity of managing access across multiple identity providers (IDPs). These findings come from the new Strata Identity-commissioned report, State of Multi-Cloud Identity: Insights and Trends for 2025. The report, based on survey data from the Cloud Security Alliance (CSA), highlights trends and challenges in securing cloud environments. The CSA is the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment. Read Now

  • Study: Nearly Half of Companies Exclude Cybersecurity Teams When Developing, Onboarding and Implementing AI Solutions

    Only 35 percent of cybersecurity professionals or teams are involved in the development of policy governing the use of AI technology in their enterprise, and nearly half (45 percent) report no involvement in the development, onboarding, or implementation of AI solutions, according to the recently released 2024 State of Cybersecurity survey report from ISACA, a global professional association advancing trust in technology. Read Now

  • New Report Series Highlights E-Commerce Threats, Fraud Against Retailers

    Trustwave, a cybersecurity and managed security services provider, recently released a series of reports detailing the threats facing the retail sector, marking the second year of its ongoing research into these critical security issues. Read Now

  • Stay Secure in 2024: Updated Cybersecurity Tips for the Office and at Home

    Cyber criminals get more inventive every year. Cybersecurity threats continue to evolve and are a moving target for business owners in 2024. Companies large and small need to employ cybersecurity best practices throughout their organization. That includes security integrators, manufacturers, and end users. Read Now

Featured Cybersecurity

Webinars

New Products

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation. 3

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation. 3

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame. 3