Hummer was an Android Trojan family that, according to security company Cheetah Mobile in 2016, disguised itself as legitimate apps, rooted infected phones, and installed unwanted software—including porn-related apps—while displaying pop-up ads. The China connection in the original headline was a possibility, not a confirmed origin. The reports describe a historical threat; they do not establish that Hummer is widespread today.
What Hummer did to Android phones
In a July 2016 report, CSO Online’s Michael Kan described Hummer as a family of Trojans that imitated Android apps. Cheetah Mobile said victims might believe they were installing YouTube or other Google services. Once on a device, the malware could root the phone—gaining elevated, administrator-level access—and install unwanted apps, including games and porn-related apps. It also displayed pop-up advertisements.
Root access matters because it can let malware make changes beyond what an ordinary app can do. Kaspersky’s March 2016 analysis of Android rooting malware describes how such malware could gain superuser privileges to install apps and show aggressive advertising. That analysis names Trojan.AndroidOS.Iop among related families; it provides historical technical context, not proof of Hummer’s current activity or a Hummer-specific removal method. Kaspersky’s analysis of rooting malware also noted that, in its 2016 analysis, devices running Android versions later than 4.4.4 had fewer vulnerabilities exploitable for root access. That finding should not be read as a guarantee about newer devices today.
What was reported about Hummer’s scale and origin
The numbers in the 2016 story were claims from Cheetah Mobile, reported by CSO Online—not current measurements or independently verified counts. Cheetah Mobile said it had tracked Hummer since 2014 and estimated that it affected more than 1 million devices per day. It also said its own testing saw 2GB of network data used within hours. The company estimated that developers could make about US$500,000 per day; that was a potential-proceeds estimate, not established revenue.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
CSO Online reported that Cheetah Mobile identified India, Indonesia, Turkey, China, and Mexico as the places where Hummer was spreading most at the time, with cases also reported in the United States and Europe. Those are historical reported geographies, not a current ranking. The story said China might be the source because domain names linked to an email account there; it did not establish Chinese origin.
The reviewed reporting and technical analysis do not establish whether Hummer is still circulating, how prevalent it is now, or whether a current Hummer-specific removal product exists. Treat Hummer as a historically reported Android threat, not as a confirmed widespread threat today.
Rank #2
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
What to do if your Android phone keeps installing unwanted apps
The steps below follow Google’s general guidance for suspected malware. They can help investigate and respond to suspicious behavior, but they are not a guaranteed fix for a rooted or system-level infection.
- Run Google Play Protect. Open the Google Play Store, tap your profile icon, then choose Play Protect and scan. Google recommends enabling Play Protect so it can check apps for harmful behavior.
- Install Android and security updates. Check your phone’s Settings app for available system and security updates. Menu names vary by manufacturer and Android version; use the update option provided by your device.
- Uninstall apps you do not trust. Remove recently installed or unfamiliar apps, especially those you did not intentionally download. If an app cannot be removed or unwanted installs continue, proceed to the next checks rather than assuming the problem is resolved.
- Review your account security. Check your Google Account for unfamiliar activity and follow Google’s account-security recommendations if anything looks wrong.
- Escalate if symptoms persist. Google says a factory reset or help from the device manufacturer may be appropriate when malware symptoms continue. Back up important data carefully before resetting, and contact the manufacturer if you are unsure how to proceed or the problem returns.
Google lists persistent pop-ups, unexplained device behavior, reduced storage, and an ineffective antivirus app among possible signs of malware. Its guidance is general rather than Hummer-specific. In 2016, Cheetah Mobile claimed Hummer could resist deletion and survive a factory reset; that historical vendor claim is not a guarantee that every reset fails, nor does Google’s current general reset advice guarantee removal of a rooted infection. Google’s Android malware guidance explains the recommended checks and escalation options.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallQuick Recap
Best Value
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Rank #4
- Recover Existing Android Data - Retrieve text messages, call logs, contacts, calendar entries, notes, photos, videos, and more from supported Android phones and tablets. Designed to help access important files and information quickly through an easy-to-use recovery process. Ideal for personal, business, or technical data recovery needs.
- Advanced Search & Data Review Tools - Built-in search functions help locate keywords, symbols, names, and specific records across extracted device data. Review messages, browsing history, app data, media files, and timelines more efficiently without manually sorting large amounts of content. Helps streamline file discovery and organization.
- Runs Directly from the Stick, No Installation Required - The software operates directly from the included recovery device, so no installation is required on your Windows computer. Simple plug-and-use setup makes operation fast and straightforward.
- Unlimited Use with Lifetime License & Updates - Use the Phone Recovery Stick across multiple supported devices with no per-phone usage limits. Includes lifetime license access with software updates to help maintain compatibility over time. A cost-effective solution for ongoing recovery and device access needs.
- Windows Compatible for Supported Android Devices - Compatible with Windows systems and designed to work with many supported Android phones and tablets using a standard data cable. Access available device data through a simple connection process with user-friendly recovery software. For advanced recovery options that may require root access, third-party rooting solutions can be used separately.
Rank #3
- SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows (Windows 7 with Service Pack 1, Windows 8, Windows 8.1, Windows 10, and Windows 11), Mac OS (Yosemite 10.10 or later), iOS (11.2 or later), and Android (5.0 or later). Organize and keep your digital life safe from hackers
- SAFE ONLINE BANKING: A unique, dedicated browser secures your online transactions; Our Total Security product also includes 200MB per day of our new and improved Bitdefender VPN
- ADVANCED THREAT DEFENSE: Real-Time Data Protection, Multi-Layer Malware and Ransomware Protection, Social Network Protection, Game/Movie/Work Modes, Microphone Monitor, Webcam Protection, Anti-Tracker, Phishing, Fraud, and Spam Protection, File Shredder, Parental Controls, and more
- ECO-FRIENDLY PACKAGING: Your product-specific code is printed on a card and shipped inside a protective cardboard sleeve. Simply open packaging and scratch off security ink on the card to reveal your activation code. No more bulky box or hard-to-recycle discs. PLEASE NOTE: Product packaging may vary from the images shown, however the product is the same.
Sources and date context
- CSO Online, Michael Kan, July 1, 2016 — reporting on Hummer based on claims from Cheetah Mobile.
- Kaspersky Securelist, March 3, 2016 — historical analysis of Android rooting malware.
- Google Android Help — general guidance for suspected malware or unsafe software.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
