Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Mazar Bot is new Android malware that spreads via SMS.
Its capabilities: It can read incoming SMS and send itself, make calls to directory contacts, contaminate Chrome, access to the Network, read the phone status or query the network to know the status and completely erase the contents of storage.
What are the measures to be taken to protect against this new malware?
And what are the steps to follow for cleaning an infected smartphone?
The text message to infect your device with the Mazar bot looks like this:
You have received a multimedia message from +[country code] [sender number] Follow the link http: //www.mmsforyou [.] Net / mms.apk to view the message.
Don't run the link and you don't get infected.
You can also ensure that the option to not allow installation of applications from unknown sources (within Settings > Security) is enabled as this will also block the installation of the APK.
the malware cannot be installed on smartphones running Android with the Russian language option. Mazar BOT will check the phone to identify the victim’s country and this will stop the malicious APK if the targeted phone turns out to be owned by a Russian user
Mazar will "gain boot persistence to help survive device restarts". To remove, nuke the device from orbit and start again.
