NQ Mobile Security Research Center, in collaboration with the leading cyber security expert Dr. Xuxian Jiang at North Carolina State University, started alerting Android users about the new malware called UpdtBot. Disguising itself as a system upgrade, it spreads via text messages that contain a link to the malicious application file. Once installed, UpdtBot registers a remote Command and Control (C&C) server, which instructs the infected device to send text messages, make phone calls, and download and install apps.
According to NQ Mobile’s estimates, some 160,000 Android users are affected by now so if you’re not sure whether you’re in that infamous group, you better install some anti-malware app and see if it detects something.
In any case, make sure to download apps only from trusted sources (Google Play, Amazon AppStore, GetJar, etc) and to carefully review the “permissions” each app requires. Those two tips alone can save you from headaches in the future…