Security

The Increasing Danger of HummingBad Malware

A new malware called HummingBad has been detected, and it is estimated to be on 10 million Android phones worldwide. Malware is a blanket term used to describe harmful software, such as viruses or adware. HummingBad was originally discovered in February of this year, but the number of infected phones rose sharply in mid-May, making the situation more concerning.

The regions most affected by this malware are China and India, where the malware has spread like wildfire. China has reported 1.6 million cases, while India has about 1.35 million cases. The U.S. has reported almost 300,000 cases.

The reason that HummingBad has achieved such traction in infecting Android users is that it is very sneaky. As an Android user, it’s difficult to detect when the malware latches onto your device — your phone can pick up the malware by simply visiting a website. From there, HummingBad tries to exploit your phone’s security weaknesses to gain access and take full control of it. In the event that this breach attempt fails, the malware has a plan B. HummingBad then sends your phone a fake system update notification, prompting you to give it full access to your phone and the ability to modify the phone. Most users are unaware that accepting this “system update” essentially opens the door for HummingBad to walk right in.

The most puzzling aspect of HummingBad is that its creators are developers at Yingmob, an advertising analytics agency that isn’t generally known for producing harmful software. Yingmob is a well-trusted company, so the discovery of this malware is interesting. The developers’ motivation seems to come from the revenue that the Malware produces.

Once HummingBad gains access to your phone, it begins to automatically download apps and click on advertisements. This generates fraudulent advertising revenue, which has been estimated to add up to $300,000 per month.

Many companies have been tracking HummingBad in attempt to learn more about it and stop it. Google, the owner of Android, is one of these companies. They claim to be working on improvements to their Android system to stop HummingBad from infecting its users and prevent future malware from infiltrating its operating system.

Luckily, you are not alone when it comes to detecting malware. The PSafe Total App offers unbeatable protection when it comes to viruses and malware, and has already detected HummingBad over 1,500 times. Download the app to get protected.

PSafe Newsroom

The dfndr blog is an informative channel that presents exclusive content on security and privacy in the mobile and business world, with tips to keep users protected. Populated by a select group of expert reporters, the channel has a partnership with dfndr lab's security team. Together they bring you, first-notice news about attacks, scams, internet vulnerabilities, malware and everything affecting cybersecurity.

Recent Posts

24 Billion Passwords Exposed? How to Check If You’re Affected.

A massive password leak has triggered a global security alert: Cybernews researchers identified an exposed…

57 years ago

That QR Code on Your Bar Table During the Game: Would You Scan It Without Thinking?

A QR code on a bar table could hide a phishing link. Learn how to…

57 years ago

Could You Spot a Fake Login Page in 5 Seconds? Take the Phishing Test

Before you keep reading, imagine this: You receive a message warning that your account is…

57 years ago

Is Mobile Data Always Safer Than Public Wi-Fi? Myth or Fact?

You’re at an airport and need to open your banking app. Which would you choose:…

57 years ago

Jury Duty Scam: Fake Arrest Warrants Are Targeting Americans

What would you do if someone claiming to be a U.S. Marshal called and said…

57 years ago

World Cup 2026 Streams: How to Tell Safe Links from Dangerous Ones

Kickoff is minutes away. You search for a 2026 World Cup stream and receive a…

57 years ago