New Android ransomware afflicts mobile users browsing porn site

New Android ransomware afflicts mobile users browsing porn site
Studies have shown that Android users like to watch the naughty stuff on their devices more frequently than their iOS-wielding counterparts. A new piece of ransomware seems to be taking advantage of this fact by injecting malicious code into Android devices browsing a particular, as yet undisclosed porn site. From there, the familar array of government warnings and threats of litigation are used in an effort to cajole a user into coughing up hundreds of dollars. 

So as to obscure any paper trail, users are told to pay their dues by means of iTunes Store gift codes. Presumably, these codes are then sold on to unwitting purchasers who think they're getting a good deal, but are instead implicating themselves in an extortion scam. 
New Android ransomware afflicts mobile users browsing porn site

According to the experts at Blue Coat, a device can be infected by the 'Cyber.Police' malware by simply visiting the unnamed adult website. No APK is installed, as is so often the story with these sorts of attacks. Rather, the malicious code takes advantage of vulnerabilities within Android 4.0 Ice Cream Sandwich through to Android 4.3 Jelly Bean, while those on Android 4.4 KitKat may also find themselves susceptible to a similar attack. Once it has its claws in, users are met with pop-ups that the device has been 'blocked' by authorities, and the situation can only be rectified by paying the fine in iTunes gold. 

Shedding further light on the activities and behaviors of the ransomware, Blue Coat notes: 


This isn't the first time that adult material has been used in an effort to coerce innocent surfers into paying huge fines. As we've seen in the past, attackers will use all the tricks in the book to get hold of your cash. But while these scams seek to catch people out when they're perhaps not in their usual state of mind, one would hope that most could still see it far-fetched that the U.S. Treasury should ever accept iTunes credit adequate remuneration. 

Those affected by the malware can take some solace in that factory reset should clear things up. BlueCoat has yet to roll out its full report on the matter, though advises users to keep sensitive files like photos, videos and similarly important data backed up in a secure location separate to a device or its memory card. This way, should an attack occur, a factory reset should be relatively painless.

Additionally, those looking to avoid getting caught up by the Cyber.Police or similar nasties should steer clear of sites that they don't know or trust. 

source: Blue Coat via Phandroid

FEATURED VIDEO

25 Comments

1. TheMan

Posts: 494; Member since: Sep 21, 2012

I totally trust my porn sites. Uh, mostly. Well, maybe not.

6. engineer-1701d unregistered

really 4.0 to kitkat why do people have these old devices just get new. i think these hacks are insider groups apple hits android and android hits apple but only older os to push new sales, when they lower. makes sense.

20. bucky

Posts: 3771; Member since: Sep 30, 2009

Isn't kitkat the highest percentage of android os?

21. joey_sfb

Posts: 6794; Member since: Mar 29, 2012

Don't use the stock andriod browser period. Google have removed them since Android 5. http://www.mobilexweb.com/blog/android-browser-eternal-dying. Use Chrome or other third parties browser that get regular update. If people don't want to learn the basic about IT security to protect themselves. They can either pay Apple for an iPhone or pay Apple for their iTunes gift cards. Knowledge save you money and pain. This problem also reveal that Google does not have an app kill switch like iOS.

34. krystian

Posts: 423; Member since: Mar 16, 2016

Is your hat made of aluminum?

8. bur60

Posts: 981; Member since: Jul 07, 2014

And you can. Studies have shown that big sites like pornhub are the cleanest sites (if we talk about virusses and spyware hehe)

2. zeeBomb

Posts: 2318; Member since: Aug 14, 2014

Aw snap. Can't slip a quickie on the hub now.

4. adrianzka

Posts: 64; Member since: Apr 25, 2013

So, are android 5.0+ devices protected from this vulnerability?

5. TechieXP1969

Posts: 14967; Member since: Sep 25, 2013

Not the porn cites I go to. Lol. So let's see. My phone comes with Lockout for free. It scans everything daily. Nothing ever comes up. Technically the sites I visit aren't porn, they are adult sites that feature people wearing very little of nothing, doing things that all adults do. Porn is a bad things, the sites I see are all good things. Maybe that's why I don't get infections. Guess you better stop watching porn.

10. zunaidahmed

Posts: 1182; Member since: Dec 24, 2011

Well, if ur phone has realtime protection, u should be good, but anything other than that, including scheduled scanning won't protect you from it, but I do think you already knew that, cheers ; )

9. Subie

Posts: 2252; Member since: Aug 01, 2015

Am I the only one who finds it funny that it attacks Android handsets and then makes the users pay with Apple's iTunes credits. LOL!

23. Podrick

Posts: 1281; Member since: Aug 19, 2015

Lol, iRony indeed.

12. ibend

Posts: 6747; Member since: Sep 30, 2014

thats some terrible placement for "\" button..

15. A123881

Posts: 1; Member since: Apr 25, 2016

I work in wireless and have seen it on several phones past few months. You can put device in safe mode then go to settings-apps-and clear cache on browser plus you'll see a mysterious app I can't remember the name that you uninstall and everything good as new with no loss of data

19. jcarmstrong23

Posts: 31; Member since: Apr 27, 2014

forget that...i go straight to factory reset. Ain't nobody got time for that

16. theguy2345

Posts: 1216; Member since: Jun 24, 2014

It's a virtual STD.

22. Podrick

Posts: 1281; Member since: Aug 19, 2015

Its Android Immune Deficiency Syndrome.

17. tacarat

Posts: 850; Member since: Apr 22, 2013

Porn sites are only a little ahead of cell phone sites.

18. KingSam

Posts: 1329; Member since: Mar 13, 2016

I have nothing that valuable. I could flash a ROM I have several and I'm rocking marshmallow so eh. Go fine their mothers!

24. Podrick

Posts: 1281; Member since: Aug 19, 2015

I hope users won't get affected from PA. Its a tech site but with those ads its nothing less of a porn site.

25. aznhachi

Posts: 212; Member since: Apr 12, 2016

older version of android ?

27. MrElectrifyer

Posts: 3960; Member since: Oct 21, 2014

I frankly, would never understand all this madness over watching fornication, adultery, nudity, etc...guess some people's soul mate just aren't enough for them, presuming they even have such.

29. RebelwithoutaClue

Posts: 5473; Member since: Apr 05, 2013

Nothing beats the old knuckleshoving on the pisspump ;)

30. Shocky unregistered

Who the hell uses a mobile device to watch porn? that's just weird.

33. elitewolverine

Posts: 5192; Member since: Oct 28, 2013

its why the screens have gotten so large, once people found out we can use it for porn it went from having the smallest screens to look at my 7in phone...

Latest Stories

This copy is for your personal, non-commercial use only. You can order presentation-ready copies for distribution to your colleagues, clients or customers at https://www.parsintl.com/phonearena or use the Reprints & Permissions tool that appears at the bottom of each web page. Visit https://www.parsintl.com/ for samples and additional information.