More
 than 10m devices running Google’s Android OS have been infected with 
HummingBad – a new piece of malware that is able to take over a 
smartphone or tablet, steal and sell on user data, including banking 
information and other data for identify theft. It is also able to 
download unauthorized apps and tap on advertising.
Security
 firms have been tracking the malware for the past few months. According
 to their statistics, after a spike in infections in May, HummingBad has
 now passed the 10 million mark. Security experts explain that it can 
infect an Android device if the user browses the infected website, in 
so-called “drive-by-download” attacks. After this, the malware tries to 
gain access to the underlying Android system by using “root access” to 
take full control. If it fails, it attempts to trick the user into 
giving almost full control via a fake update alert.
Once HummingBad has control of the Android smartphone or tablet, it can 
force it to download apps and tap on adverts in order to generate 
fraudulent advertising revenue without the device owner’s knowledge. 
Besides, the hackers could sell access to the device or the user’s data.
 Infected devices have been detected all over the world with 1.6m 
devices in China, 1.35m in India, 288,000 in the US and 100,000 in the 
UK and Australia. Google admits it has been aware of that malware and is
 constantly improving Android, actively blocking installations of 
infected apps.
Nowadays, smartphones are increasingly popular, so malware targeting 
both Android and iOS has increased in volume and effectiveness. In 
response, the platform developers made further moves to protect devices 
from such malware. However, in this case Apple has had more success in 
getting users to upgrade to the latest and most secure versions of its 
operating systems thanks to its control of both hardware and software. 
As for Android updates, it can take months if not years, because Google 
does not directly control most of the devices.
Google has recently separated security patches from the rest of the 
operating system, and now security updates are pushed out on a monthly 
basis for its own mobile devices. At the same time, other Android 
manufacturers like Samsung and LG promised to do the same. However, many
 other manufacturers are slow to release updates to user phones, which 
leaves users exposed.
If your device is infected with HummingBad, a factory reset might be the only recourse. Moreover, even then it could remain.
QR;~)