New Mobile Malware Taps Ad Networks To Spread

Palo Alto Networks researchers identified a rare Android malware family called "Dplug" that leverages second- and third-tier mobile ad networks as a built-in dropper to deliver malicious code. Dplug installs in memory to avoid immediate detection, prompts users to approve installation after other app installs, sends premium SMS messages for fraud, and communicates with attacker-controlled C2 servers; researchers collected seven samples primarily from Asia and warn the approach could enable more persistent mobile botnets and DDoS-capable networks.