Dendroid

Some of Dendroid’s promised features:

Ability to intercept and block SMS received by the target device
Download Pictures from the target device
Spy on the user by taking pictures or making audio and video recordings
Download the user’s web browser history and any saved bookmarks
Download any other accounts (email, social media, VPN) stored on the device
Send texts as the device owner
Record any ongoing calls
Open a dialogue box to ask for passwords or send messages to the victim
Dendroid also comes bundled with a universal “binder application.” This is a point-and-click tool that a customer can use to inject (or bind) Dendroid into any innocent target application that they choose with minimal effort. This means that all a wannabee malware author needs in order to start pumping out infected applications is to choose a carrier app, download it and then let Dendroid’s toolkit take care of the rest.
While overall Dendroid is not a sophisticated application, and there are signs that it may be a collaboration where several different malware projects have converged, it does represent a step change in both sophistication and operation.

Thanks to the quick identification and detection of Dendroid by security companies we don’t anticipate Dendroid becoming a major threat. However, it does represent a step change upwards in the complexity of all-in-one malware toolkits for Android. Toolkits of this sophistication changed the PC landscape significantly as it lowered the barrier for entry and enabled relatively unskilled malware operators to control substantial botnets with a level of control they would never have been able to reach on their own.

How To Stay Safe

Make sure the Android system setting ‘Unknown sources’ is unchecked to prevent dropped or drive-by-download app installs
Download a mobile security app like Lookout’s app that protects against malware as a first line of defense
Check out the full advertisement for the malware toolkit below:


Download