{"id":1565,"date":"2017-02-24T06:39:09","date_gmt":"2017-02-24T06:39:09","guid":{"rendered":"https:\/\/antivirus.comodo.com\/blog\/?p=1565"},"modified":"2025-05-26T17:23:31","modified_gmt":"2025-05-26T11:53:31","slug":"fake-trojan-flash-security-update-downloads-malware","status":"publish","type":"post","link":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/","title":{"rendered":"Fake Trojan Flash Security Update Downloads Malware"},"content":{"rendered":"<p>New Android Trojan dupes victims with malicious fake Flash security update. Once initiated it can repeatedly download other malware of its choice to surreptitiously infect the device.<\/p>\n<p>The malicious app that imitates Adobe Flash Player tricks users into believing that their app requires a safety update. The fake update screen looks pretty authentic too. This malware targets even the latest Android operating system versions and the perpetrators spread this Trojan through social media and adult websites.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-3082\" src=\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/Fake-Trojan-Flash-Security-Update.jpg\" alt=\"Trojan Horse\" width=\"650\" height=\"300\" srcset=\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/Fake-Trojan-Flash-Security-Update.jpg 650w, https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/Fake-Trojan-Flash-Security-Update-300x138.jpg 300w, https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/Fake-Trojan-Flash-Security-Update-225x104.jpg 225w\" sizes=\"auto, (max-width: 650px) 100vw, 650px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Once the user downloads the malicious app it asks the victim to grant special permissions. These permissions are then used to download further malicious apps in the background.<\/p>\n<p>When the user runs the purported &#8220;update&#8221;, another fake popup appears on the screen. This popup with an Android logo warns the user that \u201cTOO MUCH CONSUMPTION OF ENERGY\u201d is taking place and that &#8220;Saving Battery&#8221; needs to be turned ON. And if the victim turns it ON, then the fake &#8220;Saving Battery&#8221; app requests permission to &#8220;Monitor Your Actions&#8221;, &#8220;Retrieve window content&#8221; and &#8220;Turn on Explore by Touch&#8221;. (<a href=\"https:\/\/southern.ncsy.org\/canadian-pharmacy\/\">https:\/\/southern.ncsy.org<\/a>)  These are pretty sensitive permissions that the users must be wary of.<\/p>\n<p>Now the fake Flash Player icon hides from the main screen and the malware contacts its Command &amp; Control Server. Information about the device and apps on the device are sent. The C&amp;C server then sends a link to a malicious application to the infected device. The malicious application which could be ransomware, spyware or any other type of malware gets downloaded onto the device. The device also gets infected with a bogus lock screen which cannot be closed.<\/p>\n<p>The malware makes effective use of the special permissions that it had been granted. The permissions allow it to grant administrative rights for all malicious apps that it downloads. The lock screen disappears after the other malware have been installed. The device now appears to act normally to the user. If spyware had got installed then it could steal information being transferred through the device. And the victim will probably not suspect that the device contains<a href=\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/reddrop-malware-affects-android-devices\/\" target=\"_blank\" rel=\"noopener\"> malware<\/a>.<\/p>\n<p>Users who suspect that they may have installed the fake Flash Player update can confirm if their device has been infected by searching for \u2018Saving Battery\u2019 under Services. If this service exists then try to manually uninstall the app, and if that is not possible then deactivate the administrator rights first and then try to uninstall the app.<\/p>\n<p>Now install a reputed and robust <a href=\"https:\/\/antivirus.comodo.com\/blog\/computer-safety\/how-to-protect-businesses-from-cyber-attacks\/\" target=\"_blank\" rel=\"noopener\">security software<\/a> and run a scan to <a href=\"https:\/\/www.webinspector.com\/\" target=\"_blank\" rel=\"noopener\">remove any malware<\/a> on the device.<\/p>\n<p>Mobile device users must take certain other precautions such as downloading apps only from the appropriate authorized play stores or directly from the application&#8217;s authentic website. Further, user&#8217;s must be wary of the permissions that an app asks for during installation. Refrain from installing apps that ask for special permissions that it may not be appropriate.<\/p>\n<p>To ensure <a href=\"https:\/\/antivirus.comodo.com\/antivirus-for-android.php?track=8219\" target=\"_blank\" rel=\"noopener\">Android Security<\/a> protect your device with an <a href=\"https:\/\/m.comodo.com\/\" target=\"_blank\" rel=\"noopener\">advanced mobile security software<\/a>.<\/p>\n<p><a href=\"https:\/\/play.google.com\/store\/apps\/details?id=com.comodo.cisme.antivirus\" onclick=\"ga('send', 'event', {eventCategory: 'Antivirus Blog', eventAction: 'Download', eventLabel: 'Android SMS Virus \u2013 Download AV Product Play Store'});ga('nT.send', 'event', {eventCategory: 'Antivirus Blog', eventAction: 'Download', eventLabel: 'Android SMS Virus \u2013 Download AV Product Play Store'});\" target=\"_blank\" rel=\"nofollow\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1747\" src=\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/10\/Antivirus_for_Android.jpg\" alt=\"Antivirus for Android\" width=\"650\" height=\"250\" srcset=\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/10\/Antivirus_for_Android.jpg 650w, https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/10\/Antivirus_for_Android-300x115.jpg 300w, https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/10\/Antivirus_for_Android-225x87.jpg 225w\" sizes=\"auto, (max-width: 650px) 100vw, 650px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/secure.nurd.com\/home\/purchase.php?pid=109&#038;af=16166\" target=\"_blank\" rel=\"noopener\" onclick=\"ga('send', 'event', {eventCategory: 'Antivirus Blog', eventAction: 'Click', eventLabel: 'GET COMPLETE PROTECTION banner Product CIS Pro'});ga('nT.send', 'event', {eventCategory: 'Antivirus Blog', eventAction: 'Click', eventLabel: 'GET COMPLETE PROTECTION banner Product CIS Pro'});\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-8604\" src=\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2020\/08\/complete-antivirus.png\" alt=\"comodo antivirus\" width=\"650\" height=\"83\" \/><\/a><\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<br \/>\n<strong><strong>Related Resources:<\/strong><br \/>\n<\/strong><\/p>\n<p><strong><a href=\"https:\/\/antivirus.comodo.com\/blog\/computer-safety\/five-best-virus-and-malware-removal-tools\/\" target=\"blank\">https:\/\/antivirus.comodo.com\/blog\/computer-safety\/five-best-virus-and-malware-removal-tools\/<\/a><\/strong><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>New Android Trojan dupes victims with malicious fake Flash security update. Once initiated it can repeatedly download other malware of its choice to surreptitiously infect the device. The malicious app that imitates Adobe Flash Player tricks users into believing that their app requires a safety update. The fake update screen looks pretty authentic too. This [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":1607,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[88,56],"class_list":["post-1565","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-comodo-news","tag-android-security","tag-malware-protection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Fake Trojan Flash Security Update Downloads Malware<\/title>\n<meta name=\"description\" content=\"A new trojan malware is found to attack victims with malicious fake Flash security update which even targets the latest Android operating system versions.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fake Trojan Flash Security Update Downloads Malware\" \/>\n<meta property=\"og:description\" content=\"A new trojan malware is found to attack victims with malicious fake Flash security update which even targets the latest Android operating system versions.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/\" \/>\n<meta property=\"og:site_name\" content=\"Comodo Antivirus Blogs | Anti-Virus Software Updates\" \/>\n<meta property=\"article:published_time\" content=\"2017-02-24T06:39:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-26T11:53:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/RF-10639_thb_3.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"225\" \/>\n\t<meta property=\"og:image:height\" content=\"170\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"seo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"seo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/\",\"url\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/\",\"name\":\"Fake Trojan Flash Security Update Downloads Malware\",\"isPartOf\":{\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/RF-10639_thb_3.jpg\",\"datePublished\":\"2017-02-24T06:39:09+00:00\",\"dateModified\":\"2025-05-26T11:53:31+00:00\",\"author\":{\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/e534eccce9a7e6ced088443c73329462\"},\"description\":\"A new trojan malware is found to attack victims with malicious fake Flash security update which even targets the latest Android operating system versions.\",\"breadcrumb\":{\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/#primaryimage\",\"url\":\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/RF-10639_thb_3.jpg\",\"contentUrl\":\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/RF-10639_thb_3.jpg\",\"width\":225,\"height\":170,\"caption\":\"Trojan Security\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/antivirus.comodo.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fake Trojan Flash Security Update Downloads Malware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/#website\",\"url\":\"https:\/\/antivirus.comodo.com\/blog\/\",\"name\":\"Comodo Antivirus Blogs | Anti-Virus Software Updates\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/antivirus.comodo.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/e534eccce9a7e6ced088443c73329462\",\"name\":\"seo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/3b7714e98dafc3a3b391832c0f5e2b406856b62c8e81ad94382c197cdb380790?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/3b7714e98dafc3a3b391832c0f5e2b406856b62c8e81ad94382c197cdb380790?s=96&d=mm&r=g\",\"caption\":\"seo\"},\"url\":\"https:\/\/antivirus.comodo.com\/blog\/author\/seo\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Fake Trojan Flash Security Update Downloads Malware","description":"A new trojan malware is found to attack victims with malicious fake Flash security update which even targets the latest Android operating system versions.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/","og_locale":"en_US","og_type":"article","og_title":"Fake Trojan Flash Security Update Downloads Malware","og_description":"A new trojan malware is found to attack victims with malicious fake Flash security update which even targets the latest Android operating system versions.","og_url":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/","og_site_name":"Comodo Antivirus Blogs | Anti-Virus Software Updates","article_published_time":"2017-02-24T06:39:09+00:00","article_modified_time":"2025-05-26T11:53:31+00:00","og_image":[{"width":225,"height":170,"url":"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/RF-10639_thb_3.jpg","type":"image\/jpeg"}],"author":"seo","twitter_card":"summary_large_image","twitter_misc":{"Written by":"seo","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/","url":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/","name":"Fake Trojan Flash Security Update Downloads Malware","isPartOf":{"@id":"https:\/\/antivirus.comodo.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/#primaryimage"},"image":{"@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/#primaryimage"},"thumbnailUrl":"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/RF-10639_thb_3.jpg","datePublished":"2017-02-24T06:39:09+00:00","dateModified":"2025-05-26T11:53:31+00:00","author":{"@id":"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/e534eccce9a7e6ced088443c73329462"},"description":"A new trojan malware is found to attack victims with malicious fake Flash security update which even targets the latest Android operating system versions.","breadcrumb":{"@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/#primaryimage","url":"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/RF-10639_thb_3.jpg","contentUrl":"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2017\/02\/RF-10639_thb_3.jpg","width":225,"height":170,"caption":"Trojan Security"},{"@type":"BreadcrumbList","@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/fake-trojan-flash-security-update-downloads-malware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/antivirus.comodo.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Fake Trojan Flash Security Update Downloads Malware"}]},{"@type":"WebSite","@id":"https:\/\/antivirus.comodo.com\/blog\/#website","url":"https:\/\/antivirus.comodo.com\/blog\/","name":"Comodo Antivirus Blogs | Anti-Virus Software Updates","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/antivirus.comodo.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/e534eccce9a7e6ced088443c73329462","name":"seo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/3b7714e98dafc3a3b391832c0f5e2b406856b62c8e81ad94382c197cdb380790?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3b7714e98dafc3a3b391832c0f5e2b406856b62c8e81ad94382c197cdb380790?s=96&d=mm&r=g","caption":"seo"},"url":"https:\/\/antivirus.comodo.com\/blog\/author\/seo\/"}]}},"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/posts\/1565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/comments?post=1565"}],"version-history":[{"count":19,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/posts\/1565\/revisions"}],"predecessor-version":[{"id":21481,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/posts\/1565\/revisions\/21481"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/media\/1607"}],"wp:attachment":[{"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/media?parent=1565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/categories?post=1565"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/tags?post=1565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}