Dubbed as SpyDealer, this advanced form of Android malware was first discovered by cyber-security company Palo Alto Networks.
This means that 25% of the active Android devices worldwide are still running on these versions.
Until now there is no evidence of how devices were initially infected with the malware.
The most recent sample observed by researchers was created in May 2017.
Experts believe the malware codenamed GoogleUpdate or Google Service was not spread through the Google Play store.
Instead, the malware is being distributed through third-party app stores.
Source:Gadget 360
Read More
source: www.techworm.net