Fake Norton Mobile Security Ransomware Android app information

There is a new Android ransomware malicious app (malware) that is masquerading as Norton Mobile Security with the goal of tricking users into installing and falling prey to these cybercriminals demands. Like the name, "ransomware" implies, it makes money demands upon the user to make the bad situation go away.

What is this Fake Norton Mobile Security Ransomware Android app?

The malware has a logo similar to that of Symantec's Norton Mobile Security (Norton "check") and once installed and run, it launches a fake file scan progress bar. The app pretends to find infected files, and asks users to grant it administrator privileges to remove them. This allows it to lock the device, and the user is shown a fake FBI notice claiming the user visited illicit adult sites. The fake "charges" can go away and the device will be unlocked once the user pays $500 "ransom" using a GreenDot MoneyPak card. Fortunately, the malware does not encrypt any files, and the device can be easily unlocked by entering a 14-digit number that does not use predictable combinations like 00000, 11111, 12345, etc.

How does this Fake Norton Mobile Security Ransomware app get on your Android device?

This app would likely be installed by users through the Android Package Installer. This is invoked when users install apps using "Unknown Sources" within the Android Security Settings. This setting allows users to install apps from sources other than the Google Play Store such as another app store or .apk files that are attached to emails, downloaded from websites, or from an SD Card.

What should I do to protect myself?

Only download Norton Mobile Security and all other apps from the trusted sources. As an extra precaution, be especially careful when you download apps if you have enabled "Unknown Sources" in your Android smartphone or tablet Security Settings. A legitimate version of Norton Mobile Security can be downloaded for free from Google Play.

Thank you!

Thank you for using Norton Support.

< Back

Was this information helpful?

DOCID: v101535009_EndUserProfile_en_us
Operating System: Android
Last modified: 09/12/2017