Hackers control Android trojan through blog posts

Security researcher Trend Micro is reporting an Android trojan that operates partly under the command and control of a blog. The trojan, which the security company named "ANDROIDS_ANSERVER.A", poses as an e-book reader application and is mainly distributed through Chinese app stores.

Unlike other Android trojans, ANSERVER.A doesn't exploit a vulnerability to obtain root access and install itself. Instead it relies on social engineering to infect handsets.

Once the user downloads and installs the app, the malware connects to two separate servers from which it receives additional commands and updated files. The first server is a typical site that malware can send and receive information from, but the second server exhibited some characteristics that caught the Trend Micro security team's attention. This was a blog site with encrypted content.

Read more -here-