Digital Hero

In April of 2017, Trend Micro discovered that the MilkyDoor malware (the successor to DressCode) was posing as 69 unique Android apps. As reported by Trend Micro, MilkyDoor uses and encrypted SSH Tunnel to provide criminals access to your internal networks via Android phones carrying the malware. Port 22 which allows for SSH traffic is not inherently blocked by all routers - especially when they see SSH traffic. MilkyDoor takes great lengths to make its traffic look legit so network scanning tools are fooled while at the same time resulting in no warning messages on the device. Additionally, check that you don’t have an app on the list below. If you do, delete it from your device immediately.

MilkyDoor and DressCode Android Malware.pdf