Thousands of Android cell phones left Chinese factories already infected with viruses. Aiming to steal data and two-factor authentication codes, the defects mainly affected low-cost models.
Viruses spread through malicious plugins that compromise device firmware. The discovery of these flaws was confirmed last week by Fyodor Yarochkin, senior researcher at Trend Micro.
The situation was also reported during the “Black Hat Asia” cybersecurity event, which is held in Singapore. The expert explains that this criminal scheme works like “a tree absorbing liquids”.
I.e, the virus is easily transmitted through each new device that is plugged into the cell phone. In this way, Infecting factory-released phones is the easiest and simplest way to ensure that millions of devices are also maliciously compromised.
More than 40 brands involved
According to cybersecurity company Trend Micro, the problem involved at least 10 Chinese manufacturers. Although, reports follow, indicate and investigate more than 40 brands with involvement.
Most companies would not only be in Asia, but, also located in Eastern Europe. Nonetheless, the complete list with the names of the companies was not disclosed by experts. Until then, It has been difficult to identify the point of origin of chain contamination.
That's why, Security experts always recommend that Android purchases be verified. I.e, Phones should not be purchased from strangers or through social media. If the price is too cheap, be suspicious and research!
How virus installation works?
Despite the recent discovery, This is not the first case of cell phones being infected before leaving the factory. Easily install plugins, a new market has emerged and is emerging on the Dark Web with the intention of accessing private data and selling it.
Criminals can take action by installing data redirection plugins, such as social media access cookies or personal credentials. After accessing the information, they sell or rent the data to criminals.
The objective of these last, nonetheless, is to redirect a new virus chain to other devices, starting a new cycle of compromised electronics.
