View all newsletters
Receive our newsletter - data, insights and analysis delivered to you
  1. Technology
  2. Cybersecurity
December 4, 2014

Smartphones bundled with Chinese trojan

Fake ringtone app phishes for data and downloads more viruses.

By Jimmy Nicholls

Smartphones are being sold in Asia and Africa with a Chinese trojan installed on them, according to the security company Lookout.

DeathRing comes disguised as a ringtone app, but phishes for information from the victim by downloading text messages requesting data, prompting the user to download further malware through a web browser.

Jeremy Linden, security product manager at Lookout, said: "We are not currently aware of where in the supply chain DeathRing is installed, we know DeathRing is loaded in the system directory of a number of devices."

"These devices are mostly from third-tier manufacturers selling phones to the developing world."

The malware activates itself after the phone has been restarted five times, or when the phone has gone to standby and back fifty times.

Phones affected include two fake Samsung models, several phones from the Indian manufacturer Gionee and a number of Samsung clones, with the main countries hit being India, China, and Nigeria, among others.

"Detection volumes are moderate, though we consider this a concerning threat given its pre-loaded nature and the fact that we are actively seeing detections of it around the world," Linden added.

Content from our partners
Rethinking cloud: challenging assumptions, learning lessons
DTX Manchester welcomes leading tech talent from across the region and beyond
The hidden complexities of deploying AI in your business

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how Progressive Media Investments may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.