Silently installed addons!
According to researchers, devices with Android operating system come with unwanted extra add-ons. Manufacturers’ own interfaces contain malware and different plug-ins. Some plugins are part of the broader business model and are sold on dark web forums and even on mainstream social media platforms, blogs. These plugins are used for stealing sensitive information on the device, stealing SMS messages, taking control of social media accounts, advertising and click fraud. Plugins take full control of the device in as little as five minutes.
Trend Micro says that close to nine million devices were affected by this supply chain attack. The researchers did not share names, but China is mentioned several times in the report.