Dendroid is
malware
Malware (a portmanteau for ''malicious software'') is any software intentionally designed to cause disruption to a computer, server, client, or computer network, leak private information, gain unauthorized access to information or systems, depri ...
that affects Android OS and targets the mobile platform.
It was first discovered in early of 2014 by Symantec and appeared in the underground for sale for $300.
Certain features were noted as being used in Dendroid, such as the ability to hide from emulators at the time.
When first discovered in 2014 it was one of the most sophisticated Android
remote administration tool
In computing, the term remote desktop refers to a software- or operating system feature that allows a personal computer's desktop environment to be run remotely off of one system (usually a PC, but the concept applies equally to a server or a ...
s known at that time.
It was one of the first
Trojan applications to get past Google's Bouncer and caused researchers to warn about it being easier to create Android malware due to it.
It also seems to have followed in the footsteps of
Zeus
Zeus or , , ; grc, Δῐός, ''Diós'', label=Genitive case, genitive Aeolic Greek, Boeotian Aeolic and Doric Greek#Laconian, Laconian grc-dor, Δεύς, Deús ; grc, Δέος, ''Déos'', label=Genitive case, genitive el, Δίας, ''D ...
and SpyEye by having simple-to-use command and control panels.
The code appeared to be leaked somewhere around 2014.
It was noted that an
apk binder was included in the leak, which provided a simple way to bind Dendroid to legitimate applications.
It is capable of:
* Deleting call logs
* Opening web pages
* Dialing any number
* Recording calls
* SMS intercepting
* Uploading images and video
* Opening an application
* Performing
denial-of-service attack
In computing, a denial-of-service attack (DoS attack) is a cyber-attack in which the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connect ...
s
* Changing the command and control server
See also
*
Botnet
A botnet is a group of Internet-connected devices, each of which runs one or more bots. Botnets can be used to perform Distributed Denial-of-Service (DDoS) attacks, steal data, send spam, and allow the attacker to access the device and its conn ...
*
Mirai
*
Shedun
Shedun is a family of malware software (also known as Kemoge, Shiftybug and Shuanet) targeting the Android operating system first identified in late 2015 by mobile security company Lookout, affecting roughly 20,000 popular Android applications. Lo ...
*
Zombie (computer science)
In computing, a zombie is a computer connected to the Internet that has been computer security, compromised by a Hacker (computer security), hacker via a computer virus, computer worm, or Trojan horse (computing), trojan horse program and can b ...
* Kill system
References
{{Reflist
Android (operating system) malware
Botnets
Denial-of-service attacks
Mobile malware