According to Lookout, an app named LevelDropper in Google Play Store has been found infected with auto rooting malware that can root user's device and install unwanted applications.

"The LevelDropper app was already removed from the Play Store to prevent other users from downloading the app," Lookout said.

Lookout says after it installed LevelDropper, the Location Services window popped up blank. This is a significant red flag which means that an Android OS has just crashed.

The lookout Researchers also said that the some weird apps began to appear just 30 minutes after the app installation.

The apps the malware downloaded and installed are fourteen 14 in numbers, all without the user’s interaction. This indicates that the malware only find its way when it gets root access. It also displays ads on user’s device .

The researchers said they also found two privilege escalation exploits and supporting package files such as SuperSU, busybox, and supolicy after an investigation made to binary files contained in the package.

SOURCE: http://www.geeklodge.com.ng/index.php?topic=7