Users of Android devices around the world have to face a new malware application which blocks access to the device’s functions, demanding payment. To appear credible, on the screen of the devices is displayed a custom information with data that determine the users’s location, the wording suggesting the direct involvement of local authorities.
The malware named” Koler A” is part of ransomware category and acts diverting device’s functions that it infects conditioning recovery by the transfer of money in its developer accounts, using the means of payment undetectable.
Koler A requires the amount of $ 300 as a fine for the allegedly illegally accessing pornographic content using the infected device.
The threat is not completely out of context, since the infected package is downloaded when users visit certain pornographic websites using the Android device.
To facilitate infection, these sites promise users access to premium content, available after installing a special video player.
Users should have off the option to block installing APK packages from outside the official Android store, for the infection to be possible.
Koler A accesses the geolocation functions of the device to customize warning messages depending on the specific region where the user is located.
For example, users in the United States receive a message suggesting the involvement of the FBI, while users in European countries receive messages that appear to come from the local authorities.
Details of the location of the user are displayed on the screen in order to enhance the state of panic and increase the chances that the victim gives paying ” fines ” required to overlook inappropriate behavior online and the mobile return to normal operation.
Users could try to manually uninstall the infected application by pressing the Home button to minimize the virus warning shown on screen. Once on the list of applications must find its icon and draw it over the Uninstall sign. The maneuver should be done in less than five seconds, to succeed otherwise the virus message will reappear displayed on the screen, blocking access.
Use caution when installing Android applications from unknown sources other than Google Play Store!
