Edition: Global  
One News Page
“Probably the fastest-access news portal in the world”
> >

More Than 1 Million Google Accounts Breached by Gooligan, New Android Malware Variant

PR Newswire Asia Thursday, 1 December 2016
Check Point reveals a major Google security breach, caused by a new Android malware variant that infects over 13,000 devices every day

SINGAPORE, Dec. 1, 2016 /PRNewswire/ -- Check Point® Software Technologies Ltd. (NASDAQ: CHKP) today announced its security researchers have revealed a new variant of Android malware, breaching the security of more than one million Google accounts. The new malware campaign, named Gooligan, roots Android devices and steals email addresses and authentication tokens stored on them. With this information, attackers can access users' sensitive data from Gmail, Google Photos, Google Docs, Google Play, Google Drive, and G Suite.

"This theft of over a million Google account details is very alarming and represents the next stage of cyber-attacks," said Michael Shaulov, Check Point's head of mobile products. "We are seeing a shift in the strategy of hackers, who are now targeting mobile devices in order to obtain the sensitive information that is stored on them."

*Key Findings:*
* Campaign infects 13,000 devices each day and is the first to root over a million devices.
* Hundreds of the email addresses are associated with enterprise accounts worldwide.
* Gooligan targets devices on Android 4 (Jelly Bean, KitKat) and 5 (Lollipop), which represent *nearly 74% of Android devices in use today. *
* After attackers gain control over the device, they generate revenue by fraudulently installing apps from Google Play and rating them on behalf of the victim.
* Every day Gooligan installs at least 30,000 apps on breached devices, or over 2 million apps since the campaign began.

Check Point reached out to the Google security team immediately with information on this campaign. "We appreciate Check Point's partnership as we've worked together to understand and take action on these issues. As part of our ongoing efforts to protect users from the Ghost Push family of malware, we've taken numerous steps to protect our users and improve the security of the Android ecosystem overall," stated Adrian Ludwig, director of Android security, Google.

Check Point's Mobile Research Team first encountered Gooligan's code in the malicious SnapPea app last year. In August 2016, the malware reappeared with a new variant and has since infected at least 13,000 devices per day. *About 40% of these devices are located in Asia and about 12% are in Europe.* Hundreds of the exposed email addresses are associated with enterprises around the world. The infection begins when a user downloads and installs a Gooligan-infected app on a vulnerable Android device, or by clicking on malicious links in phishing attack messages.

Check Point is offering a free online tool (https://gooligan.checkpoint.com/ ) that allows users to check if their account has been breached. "If your account has been breached, a clean installation of an operating system on your mobile device is required. This complex process is called flashing, and we recommend powering off your device, and approaching a certified technician or your mobile service provider, to re-flash your device," added Shaulov.

*Follow Check Point via:*
Check Point Blog: http://blog.checkpoint.com/  
Twitter: http://www.twitter.com/checkpointsw  
Facebook: http://www.facebook.com/checkpointsoftware  
YouTube: http://www.youtube.com/user/CPGlobal
LinkedIn: https://www.linkedin.com/company/check-point-software-technologies

*About Check Point Software Technologies Ltd.*
Check Point Software Technologies Ltd. (www.checkpoint.com) is the largest network cyber security vendor globally, providing industry-leading solutions and protecting customers from cyberattacks with an unmatched catch rate of malware and other types of threats. Check Point offers a complete security architecture defending enterprises – from networks to mobile devices – in addition to the most comprehensive and intuitive security management. Check Point protects over 100,000 organizations of all sizes.

For more information, please call +65-6324-6588 or email prsg@mcgallen.com.
Share on
Share on
Post on 
Share by

Recent related news

New Android Exploit Lets Hackers Steal Your Data, Google Is Aware of the Issue

New Android Exploit Lets Hackers Steal Your Data, Google Is Aware of the Issue
According to a group of security researchers from There's a new Android Researchers from Georgia Institute of Technology and UC Santa Barbara, there's a new...
Softpedia - TechnologyAlso reported by •MashablePC World

Android Go is Google’s new streamlined OS variant for low-spec devices

Android Go is Google’s new streamlined OS variant for low-spec devices
Google is making it easier for low-powered devices to run Android smoothly – and its doing so by releasing a new version of Android altogether. Say hello to...
The Next Web - InternetAlso reported by •SoftpediaSFGate

Android co-founder Andy Rubin’s Essential smartphone likely to debut on May 30

We all know that Android co-founder Andy Rubin is working on a high-end smartphone, that is said compete with the likes of Google’s Pixel, Apple’s iPhones...
BGR India - Technology

Android O Public Beta: How to download and install it on your Pixel and Nexus devices right now

At I/O 2017, Google made a number of key announcements including the launch of Google Assistant on iOS, Android Go lightweight OS for entry-level devices and...
BGR India - TechnologyAlso reported by •MashableSoftpedia

Google Officially Announces Android Go for Entry-Level Phones

Google Officially Announces Android Go for Entry-Level Phones
During the I/O keynote of this year, Google made lots of announcements and even launched Assistant on iOS-running devices. In addition, Google debuted the...
Softpedia - TechnologyAlso reported by •PC WorldSFGateThe Age

Google Play Protect comes to Play Store, adds a layer of security to your Android devices

Google’s Android platform has often been at the receiving end when it comes to security. There have been multiple questions raised on the device’s ability to...
BGR India - TechnologyAlso reported by •Softpedia

The new Android TV home screen has the right ideas, but it's probably not enough

The new Android TV home screen has the right ideas, but it's probably not enough
I just spent some time with a small, early demo of the new home screen experience for Android O on TV. Even though it’s not fully working yet — some of the...
The Verge - Technology

You Might Like

Other recent news in Press Releases

A.M. Best Affirms Credit Ratings of MS&AD INSURANCE Group Holdings, Inc.’s Main Operating and U.S. SubsidiariesEUROPE Dairy Alternatives Market 2016-2022 - Research and Markets
Impending MEMORIAL DAY Inclement Weather Poses Greater Safety Risks at the BeachUNITED Bankshares, Inc. Holds Its Annual Meeting of Shareholders
Ubisoft® Announces FAR CRY® 5 is Coming to America’s Heartland on February 27, 2018Smt. Sumitra Mahajan Released ‘Mann Ki Baat’ - A Social Revolution on Radio by Shri NARENDRA MODI and Presented the First Copies to Shri Pranab Mukherjee
Media Advisory: Details of FORD MOTOR COMPANY’s May 2017 U.S. Sales Conference CallNAAP Global Solutions Strengthens Its Global Channels Strategy Appointing Four-Systems Company Ltd, for the Distribution of NAAP Software in the Kingdom of SAUDI ARABIA
AMC Theatres Proud to Celebrate the Life of Sir ROGER MOORE with Two James Bond Classics, The Spy Who Loved Me and For Your Eyes Only, as They Return to AMC and Odeon CinemasIconic Brands/ICNB News -- Up List Agenda; Bellissima Prosecco at Costco for Hampton Memorial Day HOLIDAYS


Environmentally friendly: One News Page is hosted on servers powered solely by renewable energy
© 2017 One News Page Ltd. All Rights Reserved.  |  About us  |  Disclaimer  |  Press Room  |  Terms & Conditions  |  Privacy Policy  |  Content Accreditation
 RSS  |  News for my Website  |  Free news search widget  |  Help  |  Contact us  |  DMCA / Content Removal
How are we doing? Send us your feedback  |   LIKE us on Facebook   FOLLOW us on Twitter   FIND us on Google+