Friday, June 21, 2024

Pay $20K To Infect Android Devices Via Google Play Store – Darkweb Report

In recent times, it has been observed by the security researchers at Kaspersky’s SecureList that the official Google Play store’s security has become increasingly vulnerable to the schemes of the threat actors. 

These shady actors have exploited various loopholes to develop tools that can effectively Trojanize the existing Android applications, making them susceptible to exploitation. 


While here, the most shocking and alarming thing is that the threat actors are selling all these malicious wares for excessive sums of up to $20,000 on the dark web.

A recent study conducted between 2019 and 2023 revealed a concerning trend in cybersecurity. 

The research has uncovered a prosperous marketplace where buyers and sellers engage in the trading of:- 

  • App developer accounts
  • Botnets
  • Malicious Android applications

Certain wares, especially those extremely useful, are sometimes going for several thousands of dollars. As far as hiding malware and unwanted programs are concerned, the following categories are the most popular:

Malicious Services Offered

Various products, services, and deals are available on the dark web for customers with different needs and budgets, just like they are on legitimate online marketplaces.

Apart from this, threat actors have been observed buying a range of illicit products on the dark web, with developers’ Google Play accounts and source code for app development tools being among the most popular.

These accounts are often obtained through shady means, such as hacking or the use of stolen identities, enabling the threat actors to upload their malicious innovations to Google Play.

To be listed in Apple’s or Google’s app stores, software must undergo intensive testing before being uploaded.

Below we have mentioned all the major services offered in these marketplaces:-

  • Google Play loaders
  • Binding service
  • Malware obfuscation
  • Installations
  • Other illicit services

Average Prices

During the research analysis, the security analysts discovered a wide range of price tags offered on the dark web for Google Play-related services.

For hassle-free trading and proceedings, they also accept payments through various methods. There are also some sellers who hold auctions as a means of selling their goods.

There are several options for providing services, including sharing the final profit, renting services, and selling them for a one-time fee.

Here below, we have mentioned all the average price tags:-

  • A loader can cost between $2,000 and $20,000.
  • A binding service usually costs about $50 to $100 or $65 per file.
  • Obfuscation of 50 files may cost around $440.
  • The average price tag for installation ranges between $0.25 to $1.


The following steps should be taken to stay protected against mobile threats:-

  • Installing apps from unknown sources should not be enabled.
  • Don’t grant an app permissions that it doesn’t need to perform its main functions without checking its permissions.
  • Protect your device from malicious apps and adware with a reliable security solution.
  • When an update becomes available for your operating system and important apps, immediately update them.
  • Always use strong and unique passwords.
  • Ensure to enable the 2FA wherever possible.

Struggling to Apply The Security Patch in Your System? – 

Related Read:


Latest articles

PrestaShop Website Under Injection Attack Via Facebook Module

A critical vulnerability has been discovered in the "Facebook" module (pkfacebook) from for...

Beware Of Illegal OTT Platforms That Exposes Sensitive Personal Information

A recent rise in data breaches from illegal Chinese OTT platforms exposes that user...

Beware Of Zergeca Botnet with Advanced Scanning & Persistence Features

A new botnet named Zergeca has emerged, showcasing advanced capabilities that set it apart...

Mailcow Mail Server Vulnerability Let Attackers Execute Remote Code

Two critical vulnerabilities (CVE-2024-31204 and CVE-2024-30270) affecting Mailcow versions before 2024-04 allow attackers to...

Hackers Attacking Vaults, Buckets, And Secrets To Steal Data

Hackers target vaults, buckets, and secrets to access some of the most classified and...

Hackers Weaponizing Windows Shortcut Files for Phishing

LNK files, a shortcut file type in Windows OS, provide easy access to programs,...

New Highly Evasive SquidLoader Attacking Employees Mimic As Word Document

Researchers discovered a new malware loader named SquidLoader targeting Chinese organizations, which arrives as...
Guru baran
Guru baran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Free Webinar

API Vulnerability Scanning

71% of the internet traffic comes from APIs so APIs have become soft targets for hackers.Securing APIs is a simple workflow provided you find API specific vulnerabilities and protect them.In the upcoming webinar, join Vivek Gopalan, VP of Products at Indusface as he takes you through the fundamentals of API vulnerability scanning..
Key takeaways include:

  • Scan API endpoints for OWASP API Top 10 vulnerabilities
  • Perform API penetration testing for business logic vulnerabilities
  • Prioritize the most critical vulnerabilities with AcuRisQ
  • Workflow automation for this entire process

Related Articles