Categories: Android

FaceApp Pro – A Fake Version of FaceApp Emerging in Wide to Infect Android Users – Beware!!

Researchers spotted a modified version of FaceApp called “FaceApp Pro” that lure users to install it and try to make money by fool victims and pretending to offer some advanced features.

Recent days a lot more allegation around the FaceApp about the privacy issues, and its features created an over hype and popularity which attracted millions of users around the globe.

FaceApp is a face-modifying tool available for both iOS and Android developed by Russian company Wireless Lab which uses neural network technology to automatically generate highly realistic transformations of faces.

Due to the App popularity, it attracted scammers who have created a modified version of Fake FaceApp and try to make money from the non-existent “Pro” version.

Scammers using an online platform such as fake websites, Youtube to distribute the fake version of FaceApp and compromise them to install it.

Researchers from ESET discovered a fake website that developed by attackers that claim to offer the “premium” version of FaceApp for free.

In facts, scammers trick users to install other paid apps and subscriptions, ads, surveys also victims receive a fraudulent request and force them to allow the notification to display the fake offers.

Researchers learn with the malicious links that redirect users to download the fake version of “FaceApp Pro” from a popular file-sharing service (mediafire.com) where attack host malware to infect the victim’s device.

FaceApp pro Scam Through YouTube Video

Another similar scam researchers learned from Youtube Video that promotes the download links for a free “Pro” version of FaceApp.

Scammers created a shorten download links that pointed to the other apps and force victims to install various additional apps from Google Play.

Researchers discovered a Video in Youtube That promotes the Fake FaceApp pro version with shortened links that could lead to users installing malware.

Through this video, Victims click the malicious link over 96,000 times. so avoid downloading apps from sources other than official app stores, and examine available information about the app (developer, rating, reviews, etc.). ESET concluded.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity course online to keep yourself updated.

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Storm-2603 Hackers Exploit SharePoint and Abuse Cloudflare Tunnel to Hide Remote Access

A December intrusion to Storm-2603, the China-based group Microsoft ties to Warlock ransomware. The attackers…

2 minutes ago

OpenSSH sshole Flaw Allows Hackers to Log Into Password-Disabled Linux Accounts Using 257-Character Passwords

A decade-old authentication bypass in OpenSSH on musl-based Linux lets attackers log into accounts that…

5 minutes ago

New GhostMap Android Vulnerability Can Crash Phones Permanently Without Opening an App or Granting Permissions

Bitdefender researchers have revealed a vulnerability called GhostMap that affects Android devices. This vulnerability can…

15 minutes ago

Microsoft Paint Vulnerability Allows Hackers to Execute Malicious Code Remotely Without User Interaction

Microsoft has announced a vulnerability in Windows Paint that could let unauthenticated attackers execute malicious…

38 minutes ago

ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers

An autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is…

1 hour ago

Shopify Makes IP Allowlisting Mandatory for All Public Apps to Prevent Stolen API Token Abuse

Shopify is making IP allowlisting mandatory for all public apps to limit abuse of stolen…

1 hour ago