One of the principal features of the malware is its capability to transform the mobile device in a bot to conduct DDoS attack. Once the C&C server send to the phone the DDoS command, TheAndroid.DDoS.1.origin starts to flood the target address with data packets.