Gooligans Ghost Android Device Users

More than one million Google accounts were hacked after malware labeled Gooligan began to spread through third-party Android app stores—in addition to the Google Play Store. The “stained” accounts are then used to upload rating fake for malicious apps and download adware to the infected device. Not only private users, accounts enterprisemany are affected. Here’s how to check if your Google account is compromised or not.

Dozens of fake apps that bring malware Gooligan download rootkit to infected devices running Android Jelly Bean, KitKat, and Lollipop. Android’s latest operating system is Nougat but about 74 percent of devices are still running the previous version, according to security researchers at a company called Check Point who discovered Gooligan.

If Gooligan manages to do root on the device, it will steal the account e-mail and tokenauthentication that provides access to Google services such as the Play Store. Broken accounts are then used to upload fake reviews on the Play Store to improve rating malicious applications which are then used to support malware. The malicious application is also used to download adware to infected devices that can make money for the criminals behind Gooligan.

Most infections occur in Asia (57%) however malware Gooligans are found in other countries. Check Point also found that there were hundreds of addresses e-mail associated with accounts enterprise around the world. Google already knows malware and take certain steps to protect users.

Baca Juga

Check Point itself has released online tools free which can be used to check if your Google account has been hacked or not. If you are one of those infected, here are the steps to take:

Install reset device operating system mobile you (the process is called ‘flashing‘). Since this process is relatively complicated, we recommend that you turn off the device and contact a service center to do flashing.
After this process is complete, replace it immediately password your Google account.

For more detailed information, including a list of applications that contain Gooligan, you can visit blog Checkpoints.