Own an Android phone? Here' a warning issued Friday by the FBI's Internet Crime Complaint Center (IC3). "The IC3 has been made aware of various malware attacking Android operating systems for mobile devices," it begins. "Some of the latest known versions of this type of malware are Loozfon and FinFisher."
Loozfon is an information-stealing piece of malware. Criminals use different variants to lure the victims. One version is a work-at-home opportunity that promises a profitable payday just for sending out email. A link within these advertisements leads to a website that is designed to push Loozfon on the user's device. The malicious application steals contact details from the user's address book and the infected device's phone number.
FinFisher is a spyware capable of taking over the components of a mobile device. When installed the mobile device can be remotely controlled and monitored no matter where the Target is located. FinFisher can be easily transmitted to a Smartphone when the user visits a specific web link or opens a text message masquerading as a system update.
Oh well. Android is vulnerable, but they don't publish specific attack vectors. So for example "FinFisher" allows for the remote control of your very personal, can't live without device, and the certain destruction of your reputation, identity, and yadda yadda, yadda is at risk. But oh My God, we can't tell you which app or vulnerability it takes advantage of in order to get into your life, blah, blah blah...