The malware bid Hummingbad has reportedly infected over 10 million Android machine , researchers at the security firm Check Point are describe . significantly , they now claim to have tracked down where it ’s originating from . They firstdiscovered the malware back in February , andthey’ve now trace itto a Chinese advertising house that duplicate as a logical company .

Yingmob , the squad deal the malware , execute side - by - side with an ad and analytics agency , according tothe report . It is a pretty typical looking ad company , but their malware generates up to $ 300,000 a calendar month through fraudulent app installs and ad clicks .

discipline Point point to Yingmob as an object lesson of how the worst malware company are capable of supporting themselves severally . " The group is extremely unionized with 25 employees that staff four disjoined group responsible for for develop HummingBad ’s malicious component , " sound out the report .

10 million infected android devices

Asif Islam / Shutterstock

" Emboldened by this independence , Yingmob and mathematical group like it can focus on hone their skill lot to take malware campaigns in entirely unexampled directions , a trend Check Point investigator believe will step up , " the researchers say . " For object lesson , group can pool gadget resources to make powerful botnets , they can create database of devices to conduct extremely - point attacks , or they can build new streams of revenue by selling access to devices under their ascendency to the highest bidder . "

On top of the 10 million users actively using these " malicious apps , " the written report says that Yingmob has access to 85 million devices globally with the ability to sell access code to infected devices , as well as the information that passes through them . The malware is predominantly hitting devices in China ( 1.6 million taint ) and India ( 1.3 million ) , but it ’s a global position with 282,800 gimmick reside in the United States . There are 20 countries that have at least 100,000 septic devices .

The report notes that the $ 300,000 a calendar month for Yingmob is " just the tip of the iceberg … The radical assay to root M of devices every day and is successful in hundreds of attempts . " That make it a arise problem for Android users . Though iPhone substance abuser are n’t free from these variety of fire either . The researchers also find oneself that Yingmob is associated with theYispecter iOS malware , which targets non - jailbroken iPhone drug user .