Terrifying! Android Malware Exposed, 50 Brands and 89 Million Phones Infected

Android malware infects 89 million phones across 50 brands

【PhoneAuto News】On May 22nd, PhoneAuto learned from foreign media that 8.9 million Android phones worldwide were pre-infected by a cybercrime organization called Lemon Group, becoming tools for their malicious activities. These phones are not only used to steal and sell text messages, social media, and online communication accounts, but also to display unnecessary ads and conduct click fraud, causing huge losses and troubles for users.


The report stated that this cybercrime organization has existed for five years, and they have used a malware called Guerrilla to infect Android devices from over 50 brands, especially low-cost phones. These devices are distributed in multiple countries around the world. Among them, the countries with the most severe infections are the United States, Mexico, Indonesia, Thailand, Russia, South Africa, India, Angola, the Philippines, and Argentina.

Guerrilla can control servers through commands and install additional malware. These “modules” can collect user data to sell to advertisers, inject ads to earn revenue, and deplete resources on victims’ phones.

This cybercrime organization is not only technically advanced but also connected to another mobile Trojan organization called Triada. They constantly update and improve their malware to adapt to different targets and environments.

Related Reports

How did this malware enter Android phones? According to the report, Guerrilla implanted its malware into firmware components produced by an unnamed third-party supplier that produces firmware components for mobile phones. So when users buy these phones, they are already infected. Moreover, this supplier also produces similar components for Android Auto, which means other Android-based IoT devices may also be affected.

Furthermore, the report also mentions that Guerilla may have brought considerable profits to groups that manufacture malicious software.

We will continue to update Phone&Auto; if you have any questions or suggestions, please contact us!


Was this article helpful?

93 out of 132 found this helpful

Discover more


Samsung Galaxy S24 series screen details exposed expected to debut with M13 screen

【Phoneauto News】Recently, foreign media have exposed the details of the screen of the Samsung Galaxy S24 series It ...


Morning News Samsung's foldable screen smartphone domestic price announced, OnePlus' new flagship exposed

【Phoneauto Morning News】On the evening of August 3rd at 1900, Samsung officially held a new product launch event fo...


Samsung delays S23 series system update in China and other regions to solve bugs

[PhoneAuto News] On June 20th, PhoneAuto noticed that according to an overseas digital blogger who frequently reveals...


Still looks great! The appearance of the Samsung Z Fold5 Thom Browne version has been exposed

[Phoneauto News] Samsung has a tradition of collaboration with American menswear brand Thom Browne Previously, the Th...


Iridium satellites provide support for the Samsung Galaxy S24 series to go online with satellite communication

【Phoneauto News】According to the latest information released by foreign media, the new Samsung Galaxy S24 series wi...


Expose Samsung's S23 series has a lot of improvements in its new system, including battery life and smoothness

[PhoneAuto News] Recently, PhoneAuto noticed that according to information from overseas blogger ICE UNIVERSE after c...