Gooligan malware Stole Millions of Google Accounts

According Check Point Software Technologies, and is responsible for an additional 13,000 new breaches of Android devices daily.Vulnerable Android handsets include devices running OS versions 4 (Ice Cream Sandwich, Jelly Bean, and KitKat) and 5 (Lollipop). Check Point estimates 74 percent of Android devices in use today are vulnerable to the malware.

Once a malicious Gooligan app is installed on a vulnerable device, attackers can push either the rootkit VROOT or Towelroot from a command-and-control server.Towelroot embeds a kernel root exploit for getting local root privileges. This enables him to permanently root the device by installing the necessary binaries. 

Also read Android root a Double edged sword                                                                      

Attackers, via Gooligan, can gain control over the device and generate revenue by fraudulently installing apps from Google Play and rating them on behalf of the victim.



So here is the quick link to check your account.Check Point has developed a tool that will check whether a user’s Google address is on its list of breached accounts