Tuesday, July 23, 2024

7 Malicious Apps Reappeared on the Play Store Using Google Icons

Seven malicious apps reappeared in Play store with slightly different names under a new publisher account.

Those malicious apps are already reported to Google by Symantec researchers and the original apps were already removed. The malware Android.Reputation.1 found hidden at least in seven of apps in the U.S. that offered fun and cool features.

The malware dubbed Android.Reputation.1 appears to be in emoji keyboard additions, space cleaners, calculators, app lockers, and call recorders.

Once it installed to the device it follows a number of methods to stay Persistent on the device, it erases the tracks and disappears.

The malware used to wait for a number of number hours to launch malicious activity, so as to avoid getting detected by the user.

It has an ability to change the icon after installation, it uses trusted icons of Google play store and Google maps. Also, the app tries to elevate the privileges and it uses Google Play icon while requesting administrator privileges.

The installed malicious apps push ads through Google Mobile Services, and URLs are launched in the web that redirects the users to the scam pages like “Congratulations, you won

Package Names used by Malicious apps Reappeared

malicious apps reappeared

Common Defences and Mitigations

  • Give careful consideration to the permission asked for by applications.
  • Download applications from trusted sources.
  • Stay up with the latest version.
  • Encrypt your devices.
  • Make frequent backups of important data.
  • Install anti-malware on their devices.
  • Stay strict with CIA Cycle.

Latest articles

SonicOS IPSec VPN Vulnerability Let Attackers Cause Dos Condition

SonicWall has disclosed a critical heap-based buffer overflow vulnerability in its SonicOS IPSec VPN....

Hackers Registered 500k+ Domains Using Algorithms For Extensive Cyber Attack

Hackers often register new domains for phishing attacks, spreading malware, and other deceitful activities. Such...

Hackers Claim Breach of Daikin: 40 GB of Confidential Data Exposed

Daikin, the world's largest air conditioner manufacturer, has become the latest target of the...

Emojis Are To Express Emotions, But CyberCriminals For Attacks

There are 3,664 emojis that can be used to express emotions, ideas, or objects...

Beware Of Fake Browser Updates That Installs Malicious BOINC Infrastructre

SocGholish malware, also known as FakeUpdates, has exhibited new behavior since July 4th, 2024,...

Data Breach Increases by Over 1,000% Annually

The Identity Theft Resource Center® (ITRC), a nationally recognized nonprofit organization established to support...

UK Police Arrested 17-year-old Boy Responsible for MGM Resorts Hack

UK police have arrested a 17-year-old boy from Walsall in connection with a notorious...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles