Android/PUP.Rooter.Kingroot

Short bio

Kingroot is a popular rooting tool used by advanced users escalate privileges on their Android device in order to gain more control of the Android operating system. 

Type and source of infection

Although this tool was designed for legitimate uses it has found its way into the hands of the bad guys who use to root devices of unsuspecting victims. With escalated privileges the malicious app can gain access to much of Android’s functionality like sending SMS, recording conversations, installing additional malware, and other behaviors.

Aftermath

Infection occurs when an app with malicious code is installed. These infected apps will run as described, like a game or productivity app, but behind the scenes the rooting will take place. Once the device has been rooted, escalation of privileges, the malicious behaviors can begin.

Protection

The best protection is to install mobile apps from a trusted source and read reviews. Running anti-malware like Malwarebytes for Android will help with an extra layer of protection.Malwarebytes for Android protects against Android/PUP.Rooter.Kingroot.

Remediation

These apps can be uninstalled using the mobile devices uninstall functionality, the tricky part is identifying the offending behavior and app. That is where Malwarebytes for Android can help by identifying these apps and remove.