New Programming Language “Kotlin” used for Developing an Android Malware

An Open-source Programming language “kotlin” has bee used to develop malicious Android apps that are capable of hijacking an Android mobile and as a similar malicious Android app called Swift Cleaner has discovered in Google Play store.

In May 2017 Google announced kotlin Programming language to Develop an Android application and the Android team has seen more than 17 percent of Android Studio projects use Kotlin.

Top Giant Android apps such as Netflix, Pinterest, Twitter are the top apps that using kotlin programming language.

The same language used a Malicious Andoird application called “Swift Cleaner” an android utility for cleans and optimizes Android devices found in Google Play Store.

This Malicious app capable of performing click fraud, execute the remote command, stealing the user information also sign up users for premium SMS subscription services without their permission.

How the Malicious works – Swift Cleaner

Once user download and install this malicious app on their device, it collects the user device information and sends it across to its command and control server.

Later it starts background services that keep running for receiving a task from its command & control server.

This malware sending an SMS to a specific number that provided by its C&C server when user infect at the first time.

Later the malware receives the SMS command, the remote server will execute URL forwarding and click ad fraud also this malware performing the Wireless Application Protocol (WAP) task by executing the remote command from C&C Server.

Accoirnding to Trend Micro, the injection of the malicious Javascript code will take place, followed by the replacement of regular expressions, which are a series of characters that define a search pattern. This will allow the malicious actor to parse the ads’ HTML code in a specific search string

It also performs some advanced functions such as uploading service provider information, CAPTCHA, and login information to C&C, by having that information it enables premium SMS service subscription at victim cost.

Common Defences On Mobile Threats

• Give careful consideration to the permission asked for by applications.
• Download applications from trusted sources.
• Stay up with the latest version.
• Encrypt your devices.
• Make frequent backups of important data.
• Install anti-malware on their devices.
• Stay strict with CIA Cycle.