You are viewing a single comment's thread.

view the rest of the comments →

0
5

[–] UffishThought 0 points 5 points (+5|-0) ago 

https://blog.lookout.com/blog/2015/11/04/trojanized-adware/

The shedun family modifies install-recovery.sh. Some variants also drop a version of the chattr command which prevents removal of a file unless the immutable bit is changed back(even as root). There will probably be a white paper in the future with low level tech details.

A new phone isn't strictly necessary - dropping in a fresh ROM would take care of matters, but many people wouldn't feel comfortable delving that deeply into their phone.

0
0

[–] Zquareman ago 

Thanks. How are people getting this, opening executables they shouldn't or something less retarded?

[–] [deleted] ago 

[Deleted]