Researchers of antivirus company AVG have discovered malware for Android that makes users believe the phone is shut down, while in reality it's not. When the phone is in this "fake switched off state", the malware is able to make phone calls, take pictures and perform other tasks.
How the malware is distributed and where it has been found isn't disclosed by AVG. However, according to AVG, the malware applies for root privileges after it's installed. When it has received root access it replaces the Android shutdown functionality. When an user wants to turn off an infected smartphone, a fake dialog appears that offers the possibility to shutdown the phone.
"After pressing the power button, you will see the real shutdown animation, and the phone appears off. Although the screen is black, it is still on", AVG writes. This is possible because the actually shutdown functionality has been hijacked by the malware and can't be used anymore.
Users who want to be sure their phone is really shutdown should remove their battery, AVG recommends.
