While we often warn about the dangers posed by information-stealing malware and banking Trojans, there is another mobile threat we need to worry about Indeed, adware infections can render the best Android phones unusable, with ads appearing out of nowhere when you least expect them
According to a new blog post from cybersecurity firm Malwrebytes, the MobiDash adware is back to wreak havoc on vulnerable Android phones Since it was first discovered in 2015, the adware has continued to spread through hundreds of variants
At the same time, however, the adware comes as a pre-packaged toolset that hackers and scammers can add to any Android application package or APK file, further facilitating its distribution
Here is everything you need to know about MobiDash adware and some tips on how to stay safe from annoying ads infesting your Android phone
One of the main things that sets MobiDash apart from other types of adware is that it can be easily added to legitimate Android apps without changing their behavior
For example, suppose you download and install a flashlight app (not recommended for obvious reasons) The app itself works as intended, but hidden within it is adware waiting to fill your phone's screen with unwanted ads
To make matters worse, Mobidash often waits several days before launching on an infected phone This makes it difficult to detect the annoying ads served by MobiDash, especially if you have recently installed several new apps on your Android smartphone
Malwarebytes' ThreatDown cybersecurity platform recently discovered a new MobiDash campaign that spreads through phishing emails and links in social media posts by real people and bots
In these posts on Facebook, users who click on the links in the screenshots (something that should definitely be avoided) go through a chain of redirects that eventually download the APK file to their phones automatically Similarly, Malwarebytes researchers also found MobiDash spreading to adult sites in a similar fashion
Protecting yourself from this particular campaign is quite simple: you can avoid becoming a victim of MobiDash malware by not sideloading the app While you should not side-load the app in the first place, you should definitely install any APK files that are randomly downloaded to your smartphone after clicking on a link in an email or social media post
In addition to adware, app sideloading can leave behind nasty malware infections, and those who fell for this latest Mobidash campaign were lucky Instead of sideloading, apps should only be downloaded from the Google Play Store or official third-party app stores such as the Samsung Galaxy Store or Amazon Appstore
To protect your Android phone from adware, malware, spyware, and other threats, you want to make sure Google Play Protect is enabled This pre-installed app scans all new apps you download as well as existing ones to keep you and your data safe But for extra protection, you may also want to consider running one of the best Android antivirus apps with it on your phone
Hackers and scammers are constantly coming up with clever new campaigns designed to bombard your phone with ads in order to steal your data and hard-earned cash, or in this case, to commit ad fraud But Mobidash may also deliver malicious ads that infect your phone with malware In any case, be very careful where you click and avoid installing apps from unknown sources
This will not be the last time you hear about MobiDash, as this particular adware has been active for nearly a decade
Comments