病毒知识库
分析不法分子使用的技术可以使我们预测其可能的发展方向，以便更加有效地抵御今后可能遇到的威胁。您也可以了解一下恶意程序如何在被感染的系统中运行以及如何抵御这些程序。
Program.SecretVideoRecorder in virus library:
Program.SecretVideoRecorder is the detection name for various modifications of specialized application that allows background video recording through built-in cameras on Android devices. The app is not malicious, but it can operate covertly. That makes it a potential cyber espionage tool if malicious actors install it onto potential victims’ devices. For example, it allows to:
- Change notification contents about ongoing video recording or turn them off entirely
- Replace the app’s icons and their title with fake ones, making the app less noticeable for the device owner
- Add geolocation data (geotags) to recording videos
- Hide created videos from other apps, like the default gallery app
- Create a schedule to automatically start recording
- Protect the app with the password
App’s password protection and main screen:
An example of substituting the app’s visible icons:
An example of substituting a notification about video recording:
病毒名称分类
据统计，每五个安卓程序中就有一个存在漏洞（换句话说就是带有缺陷），这种漏洞可使不法分子将移动木马成功嵌入设备并执行所需操作。
Dr.Web for Android中的安全审计 对移动设备的安全性做出诊断和分析，发现问题和漏洞是会提示解决方案。
