Daam Android Malware Bypasses AV Through Sideloading

CloudSEK, a cybersecurity firm, has identified a new Android malware called "Daam" that can infiltrate Android smartphones by sideloading apps and bypass antivirus apps.

This malware is highly sophisticated and can steal sensitive data and even encrypt all files on the infected smartphone with ransomware. The malware has been found in APK files for apps like Psiphon, Boulders, and Currency Pro. Although Psiphon is a VPN app, Boulders is a mobile game and Currency Pro is a currency converter. Sideloading these apps instead of installing them from the official app store like Google Play Store can result in a Daam malware infection.

Unfortunately, the malware can avoid detection by antivirus apps, and it may have already locked the files on your smartphone. Daam malware can record phone and VoIP calls, steal files, contacts, and even info on newly added contacts. All the stolen data is sent back to the hackers' command and control server. Additionally, the malware uses the AES encryption algorithm to encrypt all files on the infected smartphone without user consent.

The malware can also change the smartphone's device password or PIN to lock the user out of the phone completely.

What Can You Do to Protect Your Android Device from Malware Similar to Daam?

There are several measures you can take to protect your Android device from malware similar to Daam:

• Install apps only from trusted sources: Avoid downloading apps from third-party websites or unofficial app stores. Always download apps from the official Google Play Store or trusted third-party stores.
• Keep your device updated: Regularly update your device software and security patches to protect against known vulnerabilities.
• Install a reliable antivirus app: Install a reputable antivirus app from a trusted provider and keep it updated. Antivirus apps can help detect and remove malware.
• Review app permissions: Check the permissions requested by each app before installation and avoid apps that request access to sensitive device data or functions that are not necessary for the app's intended purpose.
• Be cautious of unsolicited messages: Do not click on links or download attachments from unsolicited messages or emails. Malware often spreads through phishing scams.
• Use a VPN: Consider using a virtual private network (VPN) to encrypt your internet traffic and protect your online privacy.

By following these precautions, you can significantly reduce the risk of your Android device being infected with malware similar to Daam.