Contact us today!
(518) 203-2110

Evolve IT

Evolve IT has been serving the Saratoga Springs area since 1995, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Alert: Largest Recorded Breach of Android Nets Hackers a Big Pay Day

Alert: Largest Recorded Breach of Android Nets Hackers a Big Pay Day

A previously known malware called Ghost Push now has a component that has caused countless problems for over a million Android users. This component, called Gooligan, is the source of the trouble, and it adds to this chaos by infecting over 13,000 new devices every day.

Gooligan can steal the authentication tokens that are used to access information stored by Google’s most common offerings. Among these are Google Drive, Google Docs, Gmail, and the G-Suite.

Rather than using the vulnerability to steal data, the criminals seem content with just using the devices to install malicious apps from the Google Play store to generate ad revenue. In fact, according to reports, this primary reason to use Gooligan brings in about $320,000 every month for the fraudsters, which makes Gooligan perhaps the largest Android breach in its history.

Of course, we bet that you’re breathing in a sigh of relief, thanking your lucky stars that Gooligan hasn’t shown any signs of stealing data. When you think about it, this is pretty incredible, as Gooligan could potentially be accessing sensitive information that is stored anywhere on your Android device. Even Google believes that Gooligan is focused more on accruing revenue rather than stealing data, claiming “The motivation… is to promote apps, not steal information.”

Google has taken the initiative and removed apps that include Gooligan from the Play Store, but who knows what other threats are out there, just waiting to be installed on a device? Keeping these threats in mind is key, especially when you have employees using their own mobile devices to access company data. If your employees access the Play Store on their devices, you need to educate them on the effects of Gooligan and how to avoid becoming a victim.

This is why it’s so important that your organization is ready to handle employee devices by following a strong Bring Your Own Device policy. If you don’t already have a BYOD policy in place, be sure to implement one as soon as possible--one that requires any employees using their own devices for work purposes to go through IT and ensure that security protocol is followed closely.

If you don’t already have a plan to deal with unauthorized devices on your network, or unauthorized apps appearing on your devices, be sure to reach out to us at (518) 203-2110.

Comments

 
No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Tuesday, 01 April 2025
If you'd like to register, please fill in the username, password and name fields.

Captcha Image

Blog Archive

Free Consultation

Sign up today for a
FREE Network Consultation

How secure is your IT infrastructure?
Let us evaluate it for free!

Sign up!

Free Consultation
 

Tag Cloud

Tip of the Week Security Technology Internet Best Practices Cloud Hackers Privacy Email Productivity Malware Business Business Computing Software User Tips Google Hosted Solutions Microsoft Upgrade Efficiency Workplace Tips Computer Innovation Smartphone Windows 10 IT Support Mobile Devices Gmail Hardware Network Security Ransomware Business Continuity Disaster Recovery Communication Hacking WiFi Facebook Operating System Microsoft Office The Internet of Things Office Social Media Backup Apps Bandwidth Website Data Windows Experience Employer-Employee Relationship Mobile Device Management Two-factor Authentication Money History Network Small Business Phishing App Managed Service Provider Outlook Mobile Computing Big Data communications Safety Wireless Technology Unified Threat Management Android Quick Tips Apple Smartphones Best Practice Firewall Alert Content Filtering Cybercrime Networking Data storage Managed IT services Cryptocurrency Laptop IBM Competition Education Presentation Entrepreneur Google Docs Bluetooth Cleaning Domains Holiday Processors Black Market YouTube LiFi Hacker Staffing Automation Office Tips Memory BYOD Downtime Help Desk Passwords Streaming Media Application Visible Light Communication Customer Service Disaster Deep Learning Micrsooft BDR Business Growth Data Management Advertising Recovery Router Vendor Management Robot Society Office 365 Sports Google Wallet Spam Information Technology Analytics Running Cable Saving Money Monitors intranet Windows 8 Lithium-ion battery Internet of Things Windows XP IT Services Hosted Solution Artificial Intelligence Documents Displays Social Networking Tech Support Compliance Public Speaking Drones Social IP Address Virtualization End of Support Printer Browser Virtual Desktop Wireless Government Writing Unified Communications Augmented Reality Securty Keyboard Document Management Search Encryption User SaaS Hard Drives VoIP Law Enforcement Remote Computing Shortcut Cortana Proactive IT DDoS Heating/Cooling Word Network Congestion Retail Save Money Music Business Management
QR-Code