‘Daam’ malware can hack your Android device, steal photos, messages : Government issues warning

How ‘Daam’ malware can put your Android device at risk?

According to the organisation, the malware has the ability to retrieve a variety of sensitive information once it has infiltrated a system. This includes browsing history, call logs, contact information, camera contents, SMS messages, and files. The operation involves bypassing security protocols, which can make it difficult to identify and eliminate.

To infect the device, the Daam virus communicates with multiple Android APK files. It is disseminated through third-party websites or programs that have been obtained from questionable or unknown sources.

Once the data is stolen, it is sent to the attacker’s server and the device’s contents are encrypted using AES encryption. This results in the creation of “.enc” files and a ransom note titled “readme_now.txt.”

Ways to protect your Android device against ‘Daam’ Malware

CERT-IN has offered a number of recommended practices and suggestions to protect your Android device against the ‘Daam’ malware and related dangers. Take a look at it.

• By restricting your app downloads to legitimate app stores like the one provided by your device’s maker or operating system, you can lessen the chance of installing potentially hazardous apps.
• Users of Android smartphones should evaluate the app’s specifications, download statistics, user reviews, and other information before downloading or installing the app.
• Install Android updates and patches when they become available from the manufacturers of Android devices.
• Avoid visiting unreliable websites and clicking on unreliable links, and use caution when you do so in unwanted emails and SMSs.
• Update your anti-virus and anti-spyware software and install it.
• Before clicking the link in any message, do thorough research. There are numerous websites that enable anyone to conduct a phone number search and view any pertinent details regarding whether or not a number is legitimate.
• Click only on URLs that distinctly state the website domain. When unsure, people might utilize search engines to look up the organization’s website directly to make sure the websites they visited were trustworthy.
• Think about utilizing Safe Browsing tools, and filtering services, as well as antivirus and content-based screening solutions.
• Be wary of URLs that have been shortened using services like bit.ly and tinyurl.
• Before providing any sensitive information, such as personal details or account login information, look for genuine encryption certificates by looking for the green lock in the browser’s address bar.
• Any unexpected activity in a customer’s account should be immediately reported to the relevant bank with the necessary information so that further suitable action can be taken.