“Adult Player" Spreads Ransomware
Posted by: Timothy Weaver on 09/09/2015 09:40 AM
[
Comments
]
Researchers at Zscaler's discovered a new variant of Android ransomware, named “Adult Player,” which, when downloaded, locks the device. It is purported to be an adult video player application.
Once opened, it downloads the app to the device, attempts to get control of the device camera and produces a screen that says the FBI has locked the device and a ransom of $500 is demanded.
The malware is persistent even after a reboot.
You won't find the app in legitimate app stores, but only directly from porn sites.
It is possible to remove the ransomware by first booting the device into safe mode. The user must them go into the “Device Administrator” under “Settings and Security” to select the ransomware app to deactivate its admin privilege. Once this is done a user can go into the “Settings” and uninstall the malicious app.
Ransomware has been on the rise in the last 12 months, with Intel Security (formerly McAfee Labs) reporting in August that instances of it have increased by 124% since 2014.
Source: IBTimes

The malware is persistent even after a reboot.
You won't find the app in legitimate app stores, but only directly from porn sites.
It is possible to remove the ransomware by first booting the device into safe mode. The user must them go into the “Device Administrator” under “Settings and Security” to select the ransomware app to deactivate its admin privilege. Once this is done a user can go into the “Settings” and uninstall the malicious app.
Ransomware has been on the rise in the last 12 months, with Intel Security (formerly McAfee Labs) reporting in August that instances of it have increased by 124% since 2014.
Source: IBTimes
Comments