New Android Malware Simulates Shutdown and Mines Your Data

If you have an Android phone and have purchased third-party apps from outside of the more well-known app stores, you may have put your device at risk from an ingenious new malware that makes it look like you’ve shut off your phone, but instead has only simulated the shutdown with identical shut off animations. Once the screen goes black and you forget about it, the malware kicks in and roots around through your device, accessing your data. Even scarier, the malware can use your phone to make outgoing calls, take pictures, and utilize a host of other features.

This malware, called the PowerOffHijack, was first spotted by AVG, who explained how it worked on their blog post. Their team believes it originated in China and is spreading via apps that originated within the country, estimating that as many as 10,000 devices have already been infected.

There are a couple of ways to know if you’re safe, even if you don’t have a clear way to know if your phone is infected. If you’re running a version of Android that’s at least v.5, you should be all right; at the same time, if your phone has not been modified (jailbroken) to allow different forms of functionality, then you’re probably okay, too.

The only issue is some retailers sell their phones with this level of functionality already in place, so you may not be aware of the potential danger. Finally, if you’ve only downloaded apps from the Google Play store, you’re probably safe as well since that app store is not available in China.

For now, there’s no patch to combat the PowerOffHijack’s capabilities. Experts are currently recommending users physically remove their batteries when they power off their phones, at least until a patch can be made available.

[Image via Roaming Required]