Categories: NewsSecurity

Android Switcher Trojan Attempts to Hijack Router DNS Settings

Users of the mobile Android operating system have seen their fair share of cyber threats throughout 2016. The year 2017 is not off to a great start either, as security researchers uncovered a new Trojan that affects most WiFi routers. By doing so, the developers can redirect WiFi users to malicious websites and networks, allowing them to capture credentials and gain remote access to mobile devices.

Switcher Trojan Is A New Android Threat

Kaspersky Lab researchers discovered this new Android malware strain late in 2016. Immediately, it became apparent that the Trojan is not targeting users directly, but merely seeks to turn them into accomplices of future crimes. By hijacking WiFi routers, unsuspecting users can be funneled to nefarious websites hosting malware and other malicious content.

So far, two different types of the Trojan Switcher malware have been identified. Both types pose an equally significant threat, resulting in over 1,250 wireless networks being hijacked already. Interestingly enough, the majority of these systems are located in China, although that does not mean this Android malware cannot cause havoc in other parts of the world.

One type of this malware masks itself as a mobile app for the Baidu search engine. Another type shows up within an app that locates and shares WiFi login information. As soon as either version of the Switcher Trojan is installed on a mobile device, it will immediately start attacking the router. By using a brute-force password guessing attack on the admin web interface, it is only a matter of time until security is breached.



Related Post

As soon as the malware bypasses the router’s security, it will then swap out DNS server addresses and replace them with a rogue server’s credentials. Any query made through a network-connected device will be re-routed to attackers’ servers, making Internet users vulnerable to phishing, malware, and other cyber attacks.

However, there is a silver lining in this story. Whoever developed the Android Switcher Trojan has been rather sloppy when it comes to setting up the command and control platform. Infection statistics are publicly visible, which is not a sign of professional coding by any means. It is possible the malware developers just want to show off their skills, though.

The Switcher Trojan shares some traits with DNSChanger, another type of malware that has seen a resurgence as of late. Targeting wireless routers and changing DNS servers is a criminal activity that usually goes by unnoticed. Stealing traffic allows assailants to carry out all kinds of mischief, without the device owner being aware of what is going on exactly.

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

JP Buntinx

JP Buntinx is a FinTech and Bitcoin enthusiast living in Belgium. His passion for finance and technology made him one of the world's leading freelance Bitcoin writers, and he aims to achieve the same level of respect in the FinTech sector.

Share
Published by
JP Buntinx

Recent Posts

Best Altcoins to Invest in Today: Qubetics Sets the Stage for Blockchain’s Future as Bitcoin Hits $108K and Litecoin Soars

The cryptocurrency world has always been a hotbed of innovation, attracting both seasoned investors and…

3 hours ago

Dogecoin Millionaire Predicts This Undervalued Altcoin Could Match DOGE’s 2021 Gains

Dogecoin's 2021 rally was a historic one, turning ordinary investors into overnight millionaires. This magnificent…

3 hours ago

Qubetics Presale Skyrockets to $7.5M as XRP and Arbitrum Lead Best Altcoins for Exponential Returns

The crypto market is always evolving, with big names like Bitcoin and Ethereum leading the…

4 hours ago

Over 300K Users Actively Mine Crypto On BlockDAG’s X1 Miner App While BNB Bulls Eye $3K; What’s XRP’s Price Target?

The crypto market is ablaze with excitement as altcoins like XRP and BNB make major…

4 hours ago

Best Crypto Presale To Buy Now: Rollblock Delivers For Holders With New License, Record Sign Ups and 7000+ Games

Rollblock is quickly becoming the best crypto presale to buy, delivering unmatched value for its…

8 hours ago

Polkadot And Uniswap Gearing For Post-Christmas Jump As Rollblock Raises $7.4 Million in Presale

While Rollblock's continues its crypto presale, with its value increasing regularly, Polkadot (DOT) and Uniswap…

9 hours ago