Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Dual Toy: New Windows Trojan Sideloads Risky Apps to Android and iOS Devices

Summary: Unit 42 discovered a Windows Trojan it named DualToy that sideloads malicious or risky apps to Android and iOS devices over USB, first seen spreading in January 2015 with Android-only capability and gaining iOS infection within six months. The family remains active with over 8,000 unique samples detected to date, mainly targeting Chinese users but also affecting people and organizations in the United States, United Kingdom, Thailand, Spain, and Ireland.

Bottom line: DualToy reuses existing pairing records on both Android and iOS to bypass the manual authorization steps those platforms added to stop USB sideloading, so a phone previously paired to an infected PC can be compromised in the background without the owner approving anything.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related