back to article Android trojan has miner so aggressive it can bork your battery

Kaspersky researchers have turned up a strain of malware lurking in adult content and fake virus scanners, and it can run a victim's Android mobe so hard they might suffer physical damage. The Android trojan, dubbed “Loapi”, has a modular architecture that lets it be adapted to run cryptocurrency mining, take part in DDoS …

  1. Adam 1

    can't blame the malware

    > it can run a victim's Android mobe so hard they might suffer physical damage.

    As bad as the malware no doubt is, if the components of a phone are capable of overwhelming the passive cooling ability of the battery, that is a failure of engineering of the mobile phone itself if it does not step down the performance to keep the heat in safe operational bands.

    1. Anonymous Coward
      Anonymous Coward

      Re: can't blame the malware

      I once had a chinese S5 clone that kept doing that to batteries without the need for any malware (I re imaged it using a pristine ROM)

      Bad HW trumps bad SW :)

    2. J. Cook Silver badge
      Trollface

      Re: can't blame the malware

      "if the components of a phone are capable of overwhelming the passive cooling ability of the battery, that is a failure of engineering of the mobile phone itself if it does not step down the performance to keep the heat in safe operational bands."

      Yes, that's called 'value engineering', and it's done primarily by middle managers who are trying to squeeze every last cent of build cost out of the thing by using components that are ok for normal use, but are inadequate if the thing needs to run at full power for anything longer than short bursts.

      1. Adam 1

        Re: can't blame the malware

        > trying to squeeze every last cent of build cost out of the thing by using components that are ok for normal use, but are inadequate if the thing needs to run at full power for anything longer than short bursts.

        This is an imminently sensible thing to do, and I don't think it is part of the problem. There is nothing wrong with a designing a device that is primarily going to display farcebook, some cat videos, the occasional game of flappy birds and maybe the occasional phone call. It isn't designed as a bitcoin miner and therefore doesn't provision the hardware (particularly with active cooling and dedicated hashing chips rather than general purpose CPUs) in such a way to allow it to run at full throttle doing that indefinitely. That doesn't matter. If presented with such a workload, it should power down some of its CPU or GPU cores and reduce the clock frequency when it detects the temperature rising too close to the threshold. If that still doesn't tame the temperature*, it should shut down to prevent damage.

        My car may look like a car you can take on the track**, but it is engineered as an urban commuter vehicle. Yes, in can floor the fast pedal if the situation warrants it, but I'm under no illusion what would happen if handed over to a mildly competent racing driver to race on a closed track. After a few laps, the oil (engine or transmission) would hit a threshold temperature, some dash lights would come on, and the thing will go into limp mode until some service centre numpty tells me about voiding warranties. That is not a cost cutting tightarsery, but an engineering compromise. Sure, they could add 14 radiators but every bit you add increases build costs, has ongoing maintenance costs, decreases reliability and adds weight.

        *Clearly means that inadequate passive cooling is available.

        **Ok, it looks nothing like such a vehicle

  2. WatAWorld

    Pity that Google doesn't have a security department that can police what the company distributes

    Pity that Google doesn't have a security department that can police what the company itself distributes and runs.

    1. Anonymous Coward
      Anonymous Coward

      Re: Pity that Google doesn't have a security department that can police what the company distributes

      Google aren't distributing this, its not mentioned how you actually get this, nor infection rates as if they did, it would be obvious how many hops you would have to jump through.

      For starters:

      Attempt to enable untrusted sources

      Ignore warning about enabling untrusted sources

      Disable play protect (onboard malware scanning)

      Find said apk

      Sideload it

      Grant it permissions

      1. RyokuMas
        Facepalm

        Re: Pity that Google doesn't have a security department that can police what the company distributes

        ... and besides, there are no real world instances of Android viruses actually out there in the wild - it's all just FUD and an attempt to smear Google, right?

        1. Anonymous Coward
          Anonymous Coward

          Re: Pity that Google doesn't have a security department that can police what the company distributes

          it's all just FUD and an attempt by Apple to smear Google, right?

          There fixed it for you...

        2. Anonymous Coward
          Anonymous Coward

          Re: Pity that Google doesn't have a security department that can police what the company distributes

          Given the billions of active Android devices, and Android being a bigger platform than Windows these days, it's pretty much unheard of to actually get any of this stuff.

          It's basically all noise, clickbait, security "experts" embarrassing themselves in public and AV vendors desperate to find a new cash-cow.

          1. Anonymous Coward
            Anonymous Coward

            Re: security "experts" embarrassing themselves in public

            As opposed to posts by those who are clearly to young to remember a time when Windows was vulnerable but didn't have a malware problem. Good to see that nothing whatsoever has been learned.

            1. Muscleguy

              Re: security "experts" embarrassing themselves in public

              While the malware on Macs was barely a problem. I remember a desktop in the lab running OS9.2 (just as the first OSX came out) that was running a bit slow. I had cause to put a zip in it and when I put that in my G4 tower it got flagged as infected. So I ran Norton on the desktop and it was absolutely riddled with NVIR, hundreds to thousands of instances. And it just ran a bit slow.

              The speed up when I cleaned it was noticeable though and appreciated by others. Computer Services let me do Mac support in our lab because I was competent and they didn't actually have a Mac specialist back then. I set the place up just peachy, on the data acquisition stations (microscope cameras) you were only allowed to save to the scratch disc which got regularly wiped to leave enough clear contiguous space to write the printer file for the montage pages. You were expected to copy the data to your own computer over the wire or put a disc in/burn one. Worked pretty well.

            2. RyokuMas
              FAIL

              Re: security "experts" embarrassing themselves in public

              "clearly to young to remember a time when Windows was vulnerable"

              ... and are too stupid to undestand sarcasm...

            3. Jim Birch

              Re: security "experts" embarrassing themselves in public

              "Good to see that nothing whatsoever has been learned."

              A comment from Lalaland. Security has improved astronomically from the old Windows days. The problem is that the exploits have improved as well. This is the nature of an arms race.

              The Android model does have some problems but the biggest and toughest one is that users are idiots.

          2. TheVogon

            Re: Pity that Google doesn't have a security department that can police what the company distributes

            "it's pretty much unheard of to actually get any of this stuff."

            Not true - myself and 1 other person I know both got hit by "expensive wall" malware that signed us up for premium rates services. We only use the Play Store, non rooted devices, latest updates, etc. etc.

            Google / Android basically doesn't have any security worth speaking of.

            1. Anonymous Coward
              Anonymous Coward

              Re: Pity that Google doesn't have a security department that can police what the company distributes

              You must have an ancient version of Android then (or have an agenda), as it's been baked into Android for a very long time, the inability to send texts to premium rate numbers without consent...

              https://blog.malwarebytes.com/wp-content/uploads/2013/06/android_premium_sms-300x200.jpg

              You must also be a bit of a cretin to grant a wallpaper app permission to send SMS messages...

              1. TheVogon

                Re: Pity that Google doesn't have a security department that can police what the company distributes

                "You must have an ancient version of Android then "

                He has a Galaxy S8 and I have an S8 plus - both on the latest Android updates. This stuff was in the PlayStore and infected millions of people.

                The Android security model is completely ineffective, and the PlayStore is basically wide open to malware and there have been numerous similar incidents.

                "the inability to send texts to premium rate numbers without consent..."

                Expensive Wall doesn't send SMS messages - it signs you up for services that send chargeable SMS messages to you! The signup is a via a web page...

  3. Anonymous Coward
    Anonymous Coward

    Did they check...

    ...with the NSA first to make sure it wasn't one of theirs?

  4. Anonymous Coward
    Trollface

    Things that make you go hmmm...

    >Kaspersky researchers have turned up<

    'turned up'. *cough, cough*, aye right!

  5. Anonymous Coward
    Trollface

    The good news...

    At least they'll be able to release an update that fixes it soon.

  6. Anonymous South African Coward Bronze badge

    Infected APK

    Wanted to have a shufty at the spy vs spy game for android, but due to play store limitations, was unable to find it in the ZA playstore...

    ...trundled off to some arb warez site, downloaded the APK and found out something else also got included as phone battery drained faster than normal.

    Luckily a factory reset helped.

    Now I avoid non-kosher APK's. Just not worth it.

  7. fidodogbreath

    YABOTH

    Yet another bowl of toxic hellstew.

  8. Jamie Jones Silver badge

    com.adups.fota.sysoper

    "com.adups.fota.sysoper" - we already know about that one. Even your original article you link to mentions it!

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like