Doctor Web’s review of virus activity on mobile devices in 2025
ID: 88087e28-6d12-5533-9f77-ea7661878d0e
STIX ID: report--88087e28-6d12-5533-9f77-ea7661878d0e
Feed Name: Dr.Web News
In 2025 Doctor Web documented widespread Android malware activity—primarily ad-displaying trojans, banking trojans, fake/fraudulent apps, and firmware-embedded backdoors—highlighting supply-chain infections (Android.Clipper.31), targeted espionage (Android.Spy.1292), and a multifunctional backdoor (Android.Backdoor.Baohuo.1.origin) that impacted over 58,000 devices; the report also details attacker techniques (NP Manager obfuscation, DEX→C conversion, packers), distribution vectors (Google Play, malicious websites, Telegram), and recommends protective measures.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.