CopyCat | CopyCat Virus For Android Affecting Zygote Android

CopyCat, A new adware has infected about 14 million of Android devices around the world, with the majority hitting Asia (55%), followed by Africa (18%), and then the Americas (12%). This malware is believed to be spreading to Android devices in Southeast Asia, but certain reports confirmed that this Adware has already hit more than 280,000 handsets in the US. This malware attacked one of the enterprise of Check point researchers and then check point researchers ran across copycat virus in march of this year. The security company believes the CopyCatVirus campaign hit its peak between April and May of 2016.

CopyCat virus

How does it work into your mobile?

CopyCat virus, A malware with very well planned capabilities which includes rooting of devices, establishing persistency and injecting code into Zygote OS for Android.
Zygote Android is a daemon which is always responsible for launching of apps in Android OS which allows the malware to control any kind of activity on the device. A classic kind of technology is used by CopyCat virus to conduct all kinds of ad fraud. Copycat hijacks the roots in the user’s device once infected and then allowing the attackers to gain complete access of the infected device. This leaves the user defenseless against the infection. 

Damaging Effects of CopyCat-

1.       Code sharing with hacking community - the sophisticated capabilities developed by adware developers can be adopted by other malware developers, and used to commit bigger crimes.

2.       Theft of sensitive information – Some adware, such as Gooligan, steal sensitive information from their victims, which can later be sold to third parties for monetary gains

3.       Device rooting or jailbreaking – Adware frequently roots or jailbreaks devices, thereby breaking the built-in security mechanisms of Android or iOS, leaving victims defenseless to even the lowest level kind of hacks.