tools.build:gradle:2.3.1 infected with HEUR:Trojan.AndroidOS.Boogr.gsh

Question

Since today when we build an App with latest Version of Android Studio and enabled instant run, Kaspersky starts to reporting us that something tries to inject HEUR:Trojan.AndroidOS.Boogr.gsh in our classes.dex. After some research i found out that this starts happening when we are using com.android.tools.build:gradle:2.3.1 instead of 2.3.0 ! I tested it on a completely new mac book. Just Download Android Studio created an empty Project with installed Kaspersky with the latest updates and got the Alert from Kaspersky. Could anybody check if that also is happening for him? Also with an old project which is using the 2.3.1 since some weeks, this is not happening i think cause of an cached version of 2.3.1. Maybe somebody has changed something in the 2.3.1 in the meanwhile.

Answer 1

We are looking into it right now.