Since the infected sites in question are showing relatively low traffic right now, the total impact on Android users is likely low. The success of such an attack largely depends on user ignorance and the popularity of the affected sites. So, the device needs to be set to approve apps not from the Google Play store, and the user has to agree to install said app. Secondly, when the suspicious app finishes downloading automatically, the device will prompt the user to install it. Although Android lets you download and install apps from anywhere, in addition to the official Google Play store, this attack still has two requirements.įirst of all, the Android device has to have sideloading on (the 'Unknown sources' setting has to be enabled) or this won't work. Here's where it gets tricky: this attack requires further user interaction. Security firm Lookout (via Reddit) describes how when a user visits a compromised website from an Android device, the malicious app is automatically downloaded.

IT administrators should note that a device infected with NotCompatible could potentially be used to infiltrate normally protected information or systems, such as those maintained by enterprises or governments. For the first time though, hacked websites with Android drive-by download malware have been discovered.Ī new Trojan, called NotCompatible, appears to serve as a simple TCP relay while posing as a system update called named 'Update.apk.' It does not currently seem to cause any direct harm to a target Android device, but could potentially be used to gain access to private networks by turning an infected smartphone into a proxy. Cyber criminals often put drive-by download malware on websites they have hacked in order to quickly infect visitors' PCs.

Free lookout premium code for android