
- Herodotus malware mimics human typing to evade timing-based antivirus detection
- Spread via SMS phishing, it installs silently using fake screens and permission bypass
- Researchers urge Android users to use Play Protect and avoid non-official app sources
One of the ways mobile antivirus programs spot malicious activity is through so-called “timing-based” detections.