Cheetah Mobile’s researchers have come across over 30 tablet brands in total having products being sold on Amazon that come with Trojans pre-installed.
The Cloudsota Trojan, the malware discovered on the devices, allows remote control of devices where it is present and bypasses user consent in performing activities – which includes installing more malware and adware, uninstalling antivirus software and plagues devices with adverts on their homepage, even turning wallpapers into adverts.
It is alleged that the attack is Chinese in origin, due to much of the code being written in Chinese. Furthermore the tablet manufacturers are Chinese and the C&C server is registered in Shenzen, a city in South-Easter China.
SOURCE: Help Net Security
View the full story here
