“Cybersecurity is a never-ending race. OS systems such as Android are continuously updating their security features to make life harder for cybercriminals and safer for customers; cybercriminals are relentless in their attempts to find ways around this; and the security industry is equally busy making sure they don’t succeed. The discovery of the modified Gugi Trojan is a good example of this. In exposing the threat, we can neutralize it, and help to keep people, their devices and their data safe,” said Roman Unucheck, Senior Malware Analyst, Kaspersky Lab.
Kaspersky Lab advises Android users to take the following steps to protect themselves against the Gugi Trojan and other malware threats:
● Don’t automatically agree to hand over rights and permissions when an app asks you to do so – think about what is being asked for, and why you are being asked for it.
● Install an antimalware solution on all devices and keep OS software up-to-date.
● Avoid clicking on links in messages from people you don’t know, or in unexpected messages from people you do.
● Exercise caution at all times when visiting websites: if something looks even slightly suspicious, it probably is.
The Trojan-Banker.AndroidOS.Gugi family has been known about since December 2015, with the modification Trojan-Banker.AndroidOS.Gugi.c first discovered in June 2016. Kaspersky Lab products detect all modifications of the Gugi Trojan malware family.
To read more about how the Gugi Trojan bypasses elements of Android 6 security, read the blog on Securelist.com.
