Sunday, April 20, 2025
HomeMalwareAndroid Gamers Beware of Fake Fortnite Game that Contains Spyware and Cryptocurrency...

Android Gamers Beware of Fake Fortnite Game that Contains Spyware and Cryptocurrency Miner

Published on

SIEM as a Service

Follow Us on Google News

Android malware posing as Fake Fortnite Game includes spyware, cryptocurrency miner and install unwanted apps that show ads to generate revenue for authors. Epic games, the publisher of Fortnite recently announced that they are to extend the support for mobile platforms.

Recently they have launched the game for iOS and the Android next few months according to the company statement, in the meantime malware authors try to attract the users with malware posed as a Fortnite game.

According to zscaler “We observed this trend with Fortnite as well, in which multiple instances of Android malware were posing as the Fortnite game.”

- Advertisement - Google News

Android spyware – Fake Fortnite Game

Upon installing the Fake Fortnite Game the icon also shows the Fortnite name and the spyware starts collecting call and SMS logs and record keystrokes. Also, the spyware contains following accessibility functions.

  1. Make calls
  2. Send SMS
  3. Accessing camera and taking pictures
  4. Wiping device data
  5. Accessing accounts
  6. Reading keystrokes
  7. Accessing file manager
  8. Recording audio

According to researchers the spyware not made any connection with command-and-control servers. Possibly the spyware is still under development.

Fake Fortnite Game

Also Read Maikspy – A Spyware Attack on Windows & Android Users via Adult Games

Cryptocurrency Miner – Fake Fortnite Game

Researchers observed coin miners distributed as a Fake Fortnite Game app. The app found hosted in androidapk[.]world disguised it as Fortnite mobile.

The mining malware contains coinhive scripts embedded, the mining app significantly raises the CPU usage once the app is installed in the device. It will drain the device battery and slow down the infected device.

Revenue Generation – Fake Fortnite Game

The malware authors pushing some unwanted apps posing Fortnite game that generates ad revenue. The fake apps were removed more than 5 thousand times from the play store.

Fake Fortnite Game

Once these apps installed on the device it shows clean Fortnite game playing screen and redirects the browser to fill an online form that downloads additional apps that helps the author to generate revenue.

Common Defences and Mitigations

  • Give careful consideration to the permission asked for by applications.
  • Download applications from trusted sources.
  • Stay up with the latest version.
  • Encrypt your devices.
  • Make frequent backups of important data.
  • Install anti-malware on their devices.
  • Stay strict with CIA Cycle.
Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

10 Best Patch Management Tools 2025

In today's digital landscape, maintaining secure and efficient IT systems is critical for organizations....

10 Best Cloud Security Solutions 2025

In today’s digital era, businesses are increasingly adopting cloud computing to store data, run...

Chinese Hackers Exploit Ivanti Connect Secure Flaw to Gain Unauthorized Access

In a sophisticated cyber-espionage operation, a group known as UNC5221, suspected to have China-nexus,...

New Android SuperCard X Malware Uses NFC-Relay Technique for POS & ATM Transactions

A new malware strain known as SuperCard X has emerged, utilizing an innovative Near-Field...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

New Android SuperCard X Malware Uses NFC-Relay Technique for POS & ATM Transactions

A new malware strain known as SuperCard X has emerged, utilizing an innovative Near-Field...

KeyPlug Malware Server Leak Exposes Fortinet Firewall and VPN Exploitation Tools

Cybersecurity researchers have stumbled upon a treasure trove of operational tools and scripts linked...

Researchers Uncover Stealthy Tactics and Techniques of StrelaStealer Malware

Cybersecurity experts have recently shed light on the sophisticated operations of StrelaStealer, also known...