The new techniques employed by this malware family are sophisticated and ensure better chances at evasion, as well as have low detection rates. However, preventative measures and security solutions exist for these and other methods used by this ransomware type. Previously analyzed malicious programs of this kind primarily used either the Android Accessibility Services (designed to help users who need additional aid in interacting with their devices) or the "SYSTEM_ALERT_WINDOW" permission (allows windows to take precedence over others) - to display the ransom notes. The group in question is notable as it employs new persistence and obfuscation techniques. Some screenlockers also encrypt victims' files - however, that is not the case with this Screen Locking malware family. Screenlockers are designed to lock screens by displaying ransom-demanding messages, which - if victims comply with - promise to restore access to the device. Unlikely other ransomware types, these screenlockers do not encrypt victims' files. The goal of this malware is to push victims into paying a ransom in order to remove the messages that prevent them from using their devices.
This is a high-end screenlocker family which boasts multiple variants and a continuously evolving methodology. There are numerous variants of this malware, but they differ from previously observed Android screenlockers due to the novel techniques that they use. Screen Locking malware refers to screenlocker-type ransomware programs that target Android operating systems.
0 kommentar(er)
