The new malware, Agent Smith, has infected 25 million devices, showing ads while stealing users' sensitive information.
This malware hides in applications that appear to be completely legitimate (juegos, video tools, etc). Once the application is installed, the malware is allowed to perform its vulnerability exploitation actions.
The software was distributed in the app store 9Apps, a popular store in Asian markets. They also tried to introduce the software into Google Play, but they did not succeed.
This malware replaced part of the source code of the installed applications and prevented them from being updated, therefore, for the user, it was difficult to reverse this action.
The purpose of this application was to display advertisements, but it also tried to exploit flaws to extract bank accounts and other sensitive information.