In a recent notice, India’s national cybersecurity organization CERT-IN has warned of a dangerous Android malware called “Daam” that poses a serious threat to the security of user data. This malware has the ability to bypass antivirus, steal sensitive information and even install ransomware on target devices.

Once Daam malware is infiltrated, it can access and retrieve a wide variety of sensitive data, including web browsing history, call logs, contact information, camera content, SMS messages, and files. It works by bypassing security measures, making it difficult to detect and remove. The stolen data is then transferred to the attacker’s server, and the contents of the device are encrypted using AES encryption, leaving behind “.enc” files and a ransom message named “readme_now.txt”.

CERT-IN offered the most important practical tips and advice to protect Android devices from Daam malware and similar risks:

Limit download sources: Minimize the risk of potentially downloading malware by relying on official app stores such as the manufacturer’s or operating system’s app store.

Check out the details of the program: Before downloading an app, even from trusted sources like the Google Play Store, carefully review its details, including user reviews, downloads, reviews, and additional information.

Check app permissions. Pay attention to the permissions that apps are requesting, and only grant permissions that are necessary and relevant to the app’s intended functionality. Avoid giving unnecessary permissions that can compromise privacy.

Avoid sideloading apps: Avoid installing programs from untrusted or unofficial sources. Stick to reputable and reliable sources to install apps.

Keep your device up to date: Regularly install updates and patches provided by your device vendor, as they often contain important security enhancements.

Be careful on the Internet: Avoid surfing untrusted websites or clicking on suspicious links. Pay special attention to links received via spam emails or SMS messages, as they may lead to the download of malware or malicious websites.

Use antivirus software: Install and regularly update reliable antivirus and antispyware software on your device to detect and prevent malware infections.

Check SMS sender information: Be on the lookout for suspicious numbers that don’t look like real cell phone numbers. Legit SMS messages from banks often contain sender IDs, not phone numbers.

Do your research before clicking a link: Do your research before clicking any links, especially in messages. Use websites that allow you to look up phone numbers to verify the legitimacy of numbers or identify potential scams.

Check the URLs: only click on URLs that clearly point to the website’s domain. If you are unsure, directly search the organization’s official website using search engines to verify its legitimacy.

Use safe browsing tools: Consider using safe browsing tools and filtering services that offer antivirus, firewall, and content filtering software.

Beware of shortened URLs: Beware of shortened URLs like those using bit.ly or tinyurl. Hover over the link to view the full website domain or use the URL Verifier to verify the destination.

Check the encryption certificates: Verify that you have valid encryption certificates by looking for the green lock symbol in your browser’s address bar. Review appropriate security measures before sharing any sensitive information online.

Report suspicious activity. Immediately report any unusual activity on the account to the relevant bank or service provider, providing the appropriate information for appropriate action.

By following these guidelines and best practices, users can significantly reduce their vulnerability to Daam malware and related threats. To protect your privacy and online security, it’s important to stay alert and prioritize protecting your devices.