New Android Trojan ‘SoumniBot’ Evades Detection with Clever Tricks

A new Android trojan called SoumniBot has been detected in the wild targeting users in South Korea by leveraging weaknesses in the manifest extraction and parsing procedure.
The malware is « notable for an unconventional approach to evading analysis and detection, namely obfuscation of the Android manifest, » Kaspersky researcher Dmitry Kalinin said in a technical analysis.

A new Android trojan called SoumniBot has been detected in the wild targeting users in South Korea by leveraging weaknesses in the manifest extraction and parsing procedure.
The malware is « notable for an unconventional approach to evading analysis and detection, namely obfuscation of the Android manifest, » Kaspersky researcher Dmitry Kalinin said in a technical analysis.