Android users have a new strain of malware to worry about – one that sits in the background of infected devices and causes all kinds of trouble.
SophosLabs detects it as Andr/Dropr-FH, but others are calling it GhostCtrl. On the surface, it looks like a variant of OmniRAT, a remote admin tool for Android devices that’s available to the public. The damage this version can do includes:
Monitoring text messages, contacts, call logs, location, phone numbers and browsing history.
Logging the version of Android it infects, along with the battery level and Bluetooth details.