Android Malware Exposes Its Own Operators While Hijacking Phones and Stealing Sensitive Data

STAR Labs researchers analyzing the YuanKong Android remote access trojan found that each build embeds its operator’s account details, letting them tie 110 droppers and 57 payloads to 42 operator accounts, GBHackers reports. The malware abuses Accessibility services and Android’s Wireless Debugging feature to capture passwords and PINs and remotely control phones, without requesting SMS, contacts or camera permissions.