Cybercriminals exploit 'Windows Android Driver' searches

Looking for USB driver software that can make your Android devices work with Windows? Be very careful —you might end up having your PC infected.

 

Security firm GFI Labs said a search for “Windows Android Drivers” on Yahoo would yield a Russian URL that when visited will automatically downloads an install.exe file.

 

"Running the .exe file, which is a Trojan that we detect as Trojan.Win32.Generic!BT, allows it to modify the start page of the user’s IE browser to ... a sign-up page for a Russian 'escort' site. It does this so users are directed to the page by default whenever they open their IE browser," it said in a blog post.

 

Going to the website using an Android device will open a page leading to any of six Russian sites, which contain fake search results.

 

All links on the search pages direct users to one of five fake Google Play markets, it added.

 

"Thinking that they’re on the actual Google Play website, it is highly likely that users may end up downloading malware onto their mobile devices," GFI said.

 

Android trojans

 

GFI said its researchers found out there are two kinds of Android Trojan premium SMS apps being distributed from these markets.

 

These Trojans act like Boxer, thus SMS sent to premium numbers will happen; however, these variants will not redirect users to legitimate download sites of the apps they’re after.

 

Fake markets

 

GFI noted the fake Android Markets are looking "more and more sleek and professional."

 

"Only visit and download genuine apps from the real Google Play website by keying in play.google.com to the address bar of your mobile or PC internet browser. This ensures that you will not be directed to sites that merely look like the actual site," it said. — TJD, GMA News