0
One Plus 3T (Android Easter Egg) Ransomware

  1. T1527704105623
    Cupcake Sep 12, 2018

    T1527704105623 , Sep 12, 2018 :
    Dear Support Team,

    I performed test on my headset after watching strange app name: Android Easter Egg as a system app.

    screenshot

    1536737842741.jpg


    Android Easter Egg under system app.

    I performed all antivirus scan and finally run Virus total scan via link: https://play.google.com/store/apps/details?id=com.funnycat.virustotal

    and I found ***RANSOMWARE***

    please have a look at screenshot mentioned below
    1536737990106.jpg
    Ransomware
    1536738013197.jpg
    I immediately disable internet access as mentioned below.
    1536738074647.jpg
    and disable storage permission

    1536738097827.jpg
    Now I request everyone to perform scan using virus total app and share screenshot, if they have the same app file in app.


    I also required One Plus Team to investigate and let us know solution to avoid trouble.

    Regards
    Mohit
     

    #1
  2. Bartnl
    Lollipop Sep 12, 2018

    Bartnl , Sep 12, 2018 :
    If you would have used the search function first with keyword eater egg, and read all threads about it, you would have known what it is.
    That would have save you time in writing this redundant thread.
    https://forums.oneplus.com/search/89733881/?q=easter egg&o=date&c[title_only]=1
     

    #2
    Bouncer71 likes this.
  3. T1527704105623
    Cupcake Sep 12, 2018


    #3
  4. Mr.Anon
    Cupcake Sep 12, 2018


    #4
  5. T1527704105623
    Cupcake Sep 12, 2018

    T1527704105623 , Sep 12, 2018 :
    All 8 scanners identify system app as Ransomware should not be false positive.

    One Plus support must answer on this...
     

    #5
  6. T1527704105623
    Cupcake Sep 12, 2018


    #6
  7. anupritaisno1
    KitKat Sep 12, 2018


    #7
  8. toastytoast1234
    Marshmallow Sep 12, 2018

    toastytoast1234 , Sep 12, 2018 :
    It's not entirely unknown for malware to mislabel itself as something else, I mean they're hardly going to call their process "StealingYourShit".

    What dodgy software have you been installing from outside the Play Store?
     

    #8
    Hydra Bob likes this.
  9. T1527704105623
    Cupcake Sep 12, 2018

    T1527704105623 , Sep 12, 2018 :
    Yes bro, I never done anything with my cellphone. if you have one plus 3T. try on your headset


    I performed test on my another Motorola cellphone and it's Android Easter egg app is perfectly fine.

    have a look

    1536757641889.jpg

    Something wrong happened after 1.5GB update from One plus team (bug fix update)
     

    #9
  10. anupritaisno1
    KitKat Sep 12, 2018

    anupritaisno1 , Sep 12, 2018 :
    If your bootloader is locked then verified boot is enforcing and you don't need to worry
     

    #10
  11. T1527704105623
    Cupcake Sep 12, 2018

    T1527704105623 , Sep 12, 2018 :
    I never trust any app outside playstore. I updated my cellphone and later I started getting an alert from my bank online app that virus affected my cellphone.

    I tried everything, Kaspersky, Eset, Norton, Fsecure, all security app from PlayStore to find that virus.

    only Norton declared unusual behavior but I thought it might be false positive.

    finally I found Virus total and I run test and BOOM... it's a ransomware declared by 8 virus scanners.
     

    #11
  12. BeingIncog
    Nougat Sep 12, 2018

    BeingIncog , Sep 12, 2018 :
    more info plz!!! i'm intrigued!!!
     

    #12
    toastytoast1234 likes this.
  13. T1527704105623
    Cupcake Sep 12, 2018

    T1527704105623 , Sep 12, 2018 :
    1536758759112.jpg

    have a look, its secure n lock. I need to fix this ransomware. I don't know, what to do? I'm very much scared.
     

    Attached Files:


    #13
  14. T1527704105623
    Cupcake Sep 12, 2018

    T1527704105623 , Sep 12, 2018 :
    anyone using One Plus 3 & 3T, could you please performance scan using virus total app from Google play store and share screenshot of Android Easter egg?

    You may have Ransomware as I do. If not then also please share screenshot in this thread.

    Thanks!
     

    #14
  15. hiteshits
    Honeycomb Sep 12, 2018


    #15
  16. T1527704105623
    Cupcake Sep 13, 2018


    #16
  17. hiteshits
    Honeycomb Sep 13, 2018

    hiteshits , Sep 13, 2018 :
    Yeah, I'm on Open Beta 35
     

    #17
  18. NeverGiveUpOnUrDreams
    Lollipop Sep 13, 2018


    #18
  19. T1527704105623
    Cupcake Sep 13, 2018

    T1527704105623 , Sep 13, 2018 :
    I wonder, previously I contacted one plus support via Twitter and they replied about that thread and launched an update too.

    this time I didn't received any answer from support.

    ☹️
     

    #19
  20. T1527704105623
    Cupcake Sep 13, 2018


    #20