Skip to main content

Google Play Store Let Millions Of Users Download Malware-Laden Android Apps

antivirus company McAfee published its findings on the presence of a new kind of malware in a large number of Google Apps, which could make your Android smartphone vulnerable to hacking. The malware, which has been called “Grabos,” was initially discovered in lines of code of several apps.

Users are at a risk of installing such apps since these apps seem to have fooled Google’s safety checks and have also received a high rating on the Play Store.

Most of these apps were launched on the Google Play Store as recently as August. The first such application was the Aristotle Music Audio Player 2017, which was a free audio player available on Google Play. The app had been installed between 1-5 million times, even though some users had commented that it was malware.

Going by the list of apps published by McAfee in its blog post Sunday, most such apps seem to be music-themed and are either music players or music downloaders which let users listen to or download music for free. These apps then ask the user repeatedly to rate them on the Google Play store.

These apps seem to have been rated as high as 4.4 which is the same as Shaza, a verified safe music recognition app.

What’s interesting is how these apps have fooled the Google Play Store safety check. When such apps are installed, the malware is injected into the file explorer on your device and into your music player applications. They then check if your device is connected to the internet and whether the Developer Settings on your device are enabled. It also checks whether your device’s control server can flag malware.

If it receives a positive response to any of these parameters, a fake app is launched — the infected app works like any regular app. However, if such checks are not activated on your device, the real app launches. Then it tries to infect your device with malicious files.

These apps resemble functionality of real apps which is hidden inside a malware package. Two alternate lines of code are available to the app and it will determine which one will run based on if it can pass safety checks on your device as well as the Google Play Store.

These apps then collect information from your device including:


  • android_version
  • build_model
  • install_referrer
  • network_country
  • sim_country
  • carrier_name
  • language_code
  • country_code
  • time_timezon0065

It also collects your IP address, geographical location, and also determines whether your device is rooted or not. If yes, the data is rooted to a remote server.

McAfee listed 144 apps to Google which have been removed from the Play Store. According to the company, these apps were being used only for running spam ads on Android devices.

“During our analysis of this threat, the control servers always provided empty parameters for the custom notifications to trick users into installing applications. Taking into account the functionality to display ads and the high number of downloads, we believe the main purpose of Grabos is to make money by promoting the installation of apps,” McAfee said in its blog post.

However, the extent of the information collected and the devices affected could easily land in the hands of cybercriminals who could hack into your device. It is therefore advisable not to use third-party apps to download free music or free functionality, even if they have received a high-rating in the Google Play Store. You might be better off downloading more well-known apps such as Pandora or Spotify.

If you still want to install such apps, a simple check that you can perform while using such apps would be to check if they are available both in the iTunes Store and the Google Play Store. On an Android device, you will be able to do this by going to the iTunes Store webpage. You can then ensure that the app has passed through the checks on both app store.

Comments

Post a Comment

Popular posts from this blog

North Korean crisis: South Korea will continue to negotiate carefully

South Korea said this in the wake of international warnings that North Korea may use negotiations with South Korea to take long for its nuclear program. South Korean Foreign Minister Gong Kaung-waha told  "We have to get more benefits from existing opportunities." North and South Korea have joined in the next Olympic Games to be held in South Korea next month under the "United Korea" flag. The negotiations are underway, with the US and its allies determined to continue pressure on North Korea. Tiya level that will destroy the United States if North Korea last year, the president said Donald Trump. Japanese Foreign Minister Taro Kano said at an international meeting on North Korea in Canada that Pyongyang's recent "pragmatic" should not be blinded by the world. Cono urged the world not to abandon their surveillance on North Korea. "It's not time for North Korea to encourage dialogue between North and South Korea by reducing the...
Post a Comment
Read more

மத்திய பிரதேசத்தில் வேலையின்மை காரணமாக தற்கொலை அதிகரிப்பு

BHOPAL: 2005 மற்றும் 2015 க்கு இடையில் மத்திய பிரதேசத்தில் வேலையின்மை காரணமாக கிட்டத்தட்ட 2000% தற்கொலைகள் அதிகரித்துள்ளன. 2005 ஆம் ஆண்டில் வேலையில்லாத் திண்டாட்டம் காரணமாக 29 பேர் உயிரிழந்தனர், இது 2015 ல் 579 ஆக உயர்ந்துள்ளது என தேசிய குற்றப் பதிவுக் குழுவின் (NCRB) புள்ளிவிவரங்களை மேற்கோளிட்டு பெரோஸ்ஸ்கா சேனாவின் அக்ஷய் ஹுன்கா அமைப்பாளர் தெரிவித்தார். வேலையின்மை தொடர்பான சிக்கல்களை முன்னிட்டு சமீபத்தில் சேனா அமைக்கப்பட்டது. இந்த விவகாரம் தொடர்பாக, தொழில் மற்றும் தொழில் அமைச்சர் ராஜேந்திர சுக்லா, "வேலையின்மை ஒரு தேசிய மற்றும் சர்வதேச பிரச்சனை. தொழில் வாய்ப்புகள் அதிகரிக்கும் மற்றும் தொழிற்துறை மற்றும் வேளாண் வளர்ச்சியின் உதவியுடன் வேலைகளை உருவாக்கும் முயற்சியில் அரசாங்கம் வெற்றி பெற்றது. " அவர் NCRB புள்ளிவிவரங்களைப் பற்றி கருத்து தெரிவிக்கவில்லை, "நீங்கள் தற்கொலை செய்து கொள்ளும்போது நீங்கள் ஒரு வித்தியாசமான கதையைப் பார்ப்பீர்கள்." சனிக்கிழமை ஒரு பத்திரிகையாளர் மாநாட்டில் உரையாற்றிய ஹுன்கா, 2005 முதல் அடுத்த இரண்டு ஆண்டுகளில் தற்கொலை எண்ணிக்கை 2006 மற்றும் 20...
Post a Comment
Read more

"Book": A new set of Ambedkar's writings on religion and caste

Last year's publication of the Periyar book "Periyar: Even today" was published by the Dinamal publication of about 1,000 pages on various topics. Ambedkar's writings are the most important in the current context of the need for clear social studies on the topic. Some of the articles selected from the Ambedkar Foundation published by the Ambedkar Foundation have been compiled in the book by the Maharashtra government. The book is divided into three parts: revolution in ancient India, counter-revolution and untouchability. In the first section, the problem of being a Hindu in Hinduism, the content of the Vedas, their position is subordinated to the later period, the reasons for the Hindu Gods fighting each other, the Vedas are moral and spiritual character. In the second part, Ambedkar wrote about the fall of Buddhism and the Hindu religious literature Bhagavad Gita, Vedanta Sutras, Mahabharata, Ramayana and Puranas. In the third, Ambedkar has written letters o...
Post a Comment
Read more