Kankan

Kankan Description

Kankan is a backdoor Trojan that allows criminals to access your computer, and usually is distributed through attacks involving the Chinese torrent client Xunlei. These attacks have grabbed headlines in particular since the recent confirmation of Xunlei Networking Technologies employees being involved in the design and distribution of Kankan, which intentionally evades your PC's security software and should be considered a potential high-level PC threat. Although Kankan currently only targets victims within China, its Windows and Android-compatible campaign has seen sharp rises – and using suitable anti-malware tools to remove Kankan in the event of an infection should be considered a bare minimum response for the safety of your computer.

How Kankan Can Get to Your PC with Help from the Inside

Although many cases of reputable programs being compromised by third parties have been observed through the Internet's history, malware experts have a particular interest in Kankan for being one of the rare examples of a Trojan that uses distribution methods that originate from the original company, itself. While investigation still is ongoing as to how deeply-involved the Xunlei Networking Technologies company was involved in sending Kankan to arbitrary Xunlei torrent client users, it has been confirmed that at least some employees of the company are responsible for the Kankan campaign as it currently stands.

Along with being able to infect Windows machines, Kankan also uses an Android mobile device-based installation method that only affects owners of 'rooted' Android devices – devices that have been cracked for disabling built-in security and censorship features. Kankan's means of distribution currently still is under analysis, although Kankan does include functions that are intended to let Kankan disable itself whenever Kankan detects anti-malware or other security programs trying to detect Kankan. C&C servers used in Kankan's campaign also are owned by Xunlei, further implicating the company in these attacks.

A Solution to the Kankan Problem for Your PC and Your Phone Alike

Kankan's goals and intended uses remain as mysterious as the full means of its deployment. However, there's no mistaking Kankan as anything but a threat – as Kankan uses components disguised as modules for unrelated programs (such as Microsoft Word) and transmits confidential information about your computer (or mobile device) that could be used in future attacks against it. While the Kankan campaign has shown an impressive drop in infections since the Xunlei company released tools intended to remove Kankan, SpywareRemove.com malware experts suggest backing any Kankan removal efforts up with third-party anti-malware products that can verify that you really have deleted Kankan.

Until the methods of Kankan's distribution has been further elaborated upon, you may want to consider avoiding using the Xunlei torrent client, which, despite its endorsement by Google, still may be a danger to your computer – whether or not Kankan's attacks have any symptoms for you to notice.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Kankan may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Posted: October 21, 2013
Threat Metric
Threat Level: 9/10
Infected PCs 25

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.