Psa Android Emulator Andy Os May Be Installing Crypto Miners
After running the Andy OS installer and declining all offers, it appears to install a program called ‘Updater.exe’ via a false ‘GoogleUpdate.exe’, before setting it to run at startup. According to BleepingComputer’s Lawrence Abrams, GoogleUpdate.exe has a description of “AndyOS Update’ and is code signed by the company, showing that the company either created the file or intentionally signed it. The file’s signature also belongs to Andy Inc., making it likely the company is aware of the process....