{"id":107302,"date":"2018-08-28T16:53:42","date_gmt":"2018-08-28T16:53:42","guid":{"rendered":"http:\/\/sftarticles.wpenginepowered.com\/en\/?p=107302"},"modified":"2025-07-01T23:07:46","modified_gmt":"2025-07-02T06:07:46","slug":"android-malware-tacks-calls-and-gps","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/android-malware-tacks-calls-and-gps\/","title":{"rendered":"Android phones could be sharing your calls and photos with Russia"},"content":{"rendered":"<h2>New malware Triout secretly records phone calls and even tracks GPS coordinates<\/h2>\n<p>Researchers at antivirus specialists Bitdefender have discovered a rather alarming new malware that affects Android smartphones. Triout, which can monitor phone calls and device locations, log text messages, and then send all of the data to a third-party seems to originate from Russia. Bitdefender discovered the new malware in July using AI algorithms.<\/p>\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" alt=\"Bitdefender 2018\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-logo-l,f_auto,dpr_auto\/p\/b09873bc-99eb-11e6-a86d-00163ed833e7\/305053237\/bitdefender-internet-security-logo.png\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Bitdefender 2018<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/bitdefender-internet-security.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">Download now<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--70\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"70\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"7\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\">7<\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/bitdefender-internet-security.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n<p>After Bitdefender\u2019s original discovery, <a href=\"https:\/\/labs.bitdefender.com\/2018\/08\/triout-spyware-framework-for-android-with-extensive-surveillance-capabilities\/\" target=\"_blank\" rel=\"noopener noreferrer\">a further investigation<\/a> discovered all of Triout\u2019s capabilities:<\/p>\n<ol>\n<li><em>\u201cRecords every phone call (literally the conversation as a media file), then sends it together with the caller id to the C&amp;C (incall3.php and outcall3.php)<\/em><\/li>\n<li><em>Logs every incoming SMS message (SMS body and SMS sender) to C&amp;C (script3.php)<\/em><\/li>\n<li><em>Has capability to hide selfCan send all call logs (\u201ccontent:\/\/call_log\/calls\u201d, info: callname, callnum, calldate, calltype, callduration) to C&amp;C (calllog.php)<\/em><\/li>\n<li><em>Whenever the user snaps a picture, either with the front or rear camera, it gets sent to the C&amp;C (uppc.php, fi npic.php orreqpic.php)<\/em><\/li>\n<li><em>Can send GPS coordinates to C&amp;C (gps3.php)\u201d<\/em><\/li>\n<\/ol>\n<p>Like a lot of the new smartphone app malware we\u2019re seeing these days, Triout was discovered in a modified version of a regular app. The app in question here is the alluringly titled <strong>Sex Game for Adults<\/strong>, which was available to download via the Google Play Store in 2016. Although Sex Game for Adults has since been removed from the Play Store, it is available via various third-party app marketplaces.<\/p>\n<p>We can\u2019t stress enough here, that it is common sense that saves you from malware like Triout. According to Bitdefender\u2019s findings, once installed on your device, <strong>Triout is almost impossible to detect.<\/strong> This means it is incredibly important to keep such types of malware off your device in the first place. It is more important than ever to only download apps and software from reputable download portals like Softonic.<\/p>\n<figure id=\"attachment_92425\" aria-describedby=\"caption-attachment-92425\" style=\"width: 1024px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-92425 size-full\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/07\/android-nuovo-malware-colpito-milioni-dispositivi-v3-294038-1280x720-1024x576.jpg\" alt=\"This new Malware will Broadcast all of your Private Data (photos, emails facebook chats etc.) if you don't Pay Up\" width=\"1024\" height=\"576\" srcset=\"https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2017\/07\/android-nuovo-malware-colpito-milioni-dispositivi-v3-294038-1280x720-1024x576.jpg 1024w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2017\/07\/android-nuovo-malware-colpito-milioni-dispositivi-v3-294038-1280x720-1024x576-300x169.jpg 300w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2017\/07\/android-nuovo-malware-colpito-milioni-dispositivi-v3-294038-1280x720-1024x576-768x433.jpg 768w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2017\/07\/android-nuovo-malware-colpito-milioni-dispositivi-v3-294038-1280x720-1024x576-800x450.jpg 800w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2017\/07\/android-nuovo-malware-colpito-milioni-dispositivi-v3-294038-1280x720-1024x576-664x374.jpg 664w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2017\/07\/android-nuovo-malware-colpito-milioni-dispositivi-v3-294038-1280x720-1024x576-238x134.jpg 238w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2017\/07\/android-nuovo-malware-colpito-milioni-dispositivi-v3-294038-1280x720-1024x576-436x246.jpg 436w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2017\/07\/android-nuovo-malware-colpito-milioni-dispositivi-v3-294038-1280x720-1024x576-370x208.jpg 370w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2017\/07\/android-nuovo-malware-colpito-milioni-dispositivi-v3-294038-1280x720-1024x576-304x170.jpg 304w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption id=\"caption-attachment-92425\" class=\"wp-caption-text\">Triout malware is virtually undetectable once installed on your Android device<\/figcaption><\/figure>\n<p>One of the striking findings from the Bitdefender investigation is how easy it was for them to access the source code of the malware once the Sex Game for Adults apk file had been unpacked. This could indicate that the malware is still a work in progress and may find its way into other apps. If you\u2019re interested in reading the full findings of the Bitdefender investigation you can <a href=\"https:\/\/labs.bitdefender.com\/wp-content\/uploads\/downloads\/triout-the-malware-framework-for-android-that-packs-potent-spyware-capabilities\/\" target=\"_blank\" rel=\"noopener noreferrer\">download it here<\/a>.<\/p>\n<p>In the meantime, think twice about the places you\u2019re downloading files from and even if you\u2019re downloading your apps from the Google Play Store, remember that apps can still slip through Google\u2019s security net. For more information about keeping your devices safe when downloading apps and software make sure you check out our tutorials below:<\/p>\n<div class=\"sc-related-articles-grey\">\r\n<p class=\"sc-related-articles-grey__title\">More Softonic Articles<\/p>\r\n  <div class=\"sc-related-articles-grey__row\">\r\n    <a title=\"5 tips to prevent security issues with your phone\" href=\"https:\/\/en.softonic.com\/articles\/5-tips-to-prevent-security-issues-with-your-phone\">\r\n    <div class=\"sc-related-articles-grey__article\">\r\n      <div class=\"sc-related-articles-grey__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2018\/03\/Screen-Shot-2018-03-19-at-12.34.02.png)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-grey__text\">\r\n        <p>5 tips to prevent security issues with your phone<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n    <a title=\"8 tricks to strengthen your WhatsApp security\" href=\"https:\/\/en.softonic.com\/articles\/8-tricks-to-strengthen-your-whatsapp-security\">\r\n    <div class=\"sc-related-articles-grey__article sc-related-articles-grey__article--last\">\r\n      <div class=\"sc-related-articles-grey__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/11\/whatsapp-web-screenshot-1024x576-1024x576.png)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-grey__text\">\r\n        <p>8 tricks to strengthen your WhatsApp security<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n  <\/div>\r\n  <div class=\"sc-related-articles-grey__row\">\r\n    <a title=\"7 mistakes that put your internet security at risk\" href=\"https:\/\/en.softonic.com\/articles\/mistakes-internet-security-risk\">\r\n    <div class=\"sc-related-articles-grey__article\">\r\n      <div class=\"sc-related-articles-grey__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/06\/5mistakesHeader-1024x576.jpg)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-grey__text\">\r\n        <p>7 mistakes that put your internet security at risk<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n    <a title=\"8 tricks to boost your security on Google Chrome\" href=\"https:\/\/en.softonic.com\/articles\/8-tricks-to-boost-your-security-on-google-chrome\">\r\n    <div class=\"sc-related-articles-grey__article sc-related-articles-grey__article--last\">\r\n      <div class=\"sc-related-articles-grey__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/11\/crome-security-1024x576-1024x576.jpg)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-grey__text\">\r\n        <p>8 tricks to boost your security on Google Chrome<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n  <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>New malware Triout secretly records phone calls and even tracks GPS coordinates<\/p>\n","protected":false},"author":9073,"featured_media":92425,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[],"usertag":[839],"vertical":[],"content-category":[],"class_list":["post-107302","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","usertag-vpn"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/107302","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9073"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=107302"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/107302\/revisions"}],"predecessor-version":[{"id":327476,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/107302\/revisions\/327476"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/92425"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=107302"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=107302"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=107302"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=107302"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=107302"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=107302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}