Android/Trojan.Dropper.xHelper

Short bio

Android/Trojan.Dropper.xHelper is Malwarebytes' detection name for a Trojan.Dropper targeting Android devices.

Symptoms

Users may notice an icon in the notifications entitled “xhelper” and after a few minutes the Trojan starts adding even more icons to the notifications. Other users may spot the presence of a simple xhelper entry in the Apps Info.

Type and source of infection

Android/Trojan.Dropper.xHelper drops an encrypted DEX file with a .jar extension on the affected devices. Android/Trojan.Dropper.xHelper is most likely being spread by web redirects.

Protection

Remediation

Traces/IOCs

xHelper

com.muf****

xhelperdata.jar

firehelper.jar