In later April we discovered an Android malware that used for installing backdoor with root priveleges on the devices. This malware is popular in Russia, India, Ukraine, Algeria, but the spread is not limited to this countries. Our research has revealed infection cases all over the world. The malware is distributed via popular third-party stores and was available for download on Google Play from May 22, 2015 to June 9, 2015 (100 000 – 500 000 installs). Command servers for the backdoor is hosted by Amazon clouds…