Indian cybersecurity agencies warn android users of new malware named 'Guerilla'

Hyderabad: Indian cybersecurity agencies have warned Android users of a new malware named Guerilla that has infected millions of devices across the world. The malware steals personal information, including passwords and credit card numbers and other sensitive data.

It can also access and steal data from any app on the user’s device, the agencies said. Information Security Education and Awareness (ISEA) under the Union ministry of electronics and information technology (MeitY) also issued an advisory.

India is among the top 10 countries that are hit by this malware. According to reports, the range of devices infected by Guerilla includes Android-run smartphones, smart TVs, TV boxes, display devices and watches. The signs of malware infection include unusual battery drain, pop-up ads, changes to device settings etc.

The malware also performs malicious activities like intercepting one-time passwords (OTP) from SMS, loading additional payloads, setting up a reverse proxy from the infected device and hijacking WhatsApp sessions.

In case the device is infected by the malware, the cybersecurity agencies advised users to back up data and ‘factory reset’ the device. “This will erase all of the data on the device, including the malware,” the advisory said.

Users can also report to Google by clicking on Report Malware in Google Play Protect website and contact the device manufacturer for additional support.

The advisory told users to install apps only from trusted sources and not from third-party app stores or from unknown websites, and keep devices up to date with the latest security patches, and be cautious about allowing any new permissions during the installation of the applications.

According to the advisory, “Use trusted malware software for mobile security to stay safe from Android malware and also be careful about what information you share online.”