Since Joker-infected apps look legitimate from the outside, you'll need to take some extra precautions when downloading apps. According to Check Point, 'the new variant now hides the malicious DEX file inside the application as Base64 encoded strings, ready to be decoded and loaded.' The most recent version of Joker malware manages to get past Google's security using a clever technique. The malware hijacks the Notification Listener, allowing it to interfere with your push notifications.

To do this, Joker malware takes advantage of Notification Listener, an Android feature that gives apps access to your device's notifications. It then proceeds to prevent subscription confirmation notifications from popping up on your phone. This code is used to secretly sign you up to premium subscriptions. Instead of engaging in SMS fraud, it now uses an old trick that's typically found in Windows malware.Īfter landing on your device, Joker malware downloads a an executable DEX file from a command-and-control server. Research by Check Point has found a new kind of Joker malware that's just as deceitful as the last. Despite Google's efforts, Joker malware persists.

Joker download the new for windows