Home » mobile malware

Adware Posing as 85 Photography and Gaming Apps on Google Play Installed Over 8 Million Times

Posted on:August 16, 2019 at 5:02 am
Posted in:Mobile
Author:
Ecular Xu (Mobile Threat Response Engineer)

The mobile platform is ubiquitous — enabling users to make online transactions, run their everyday lives, or even use it in the workplace. It’s no surprise that fraudsters and cybercriminals would want to cash in on it. Delivering adware, for example, enables them to monetize affected devices while attempting to be innocuous. And while they may be viewed as a nuisance at best, mobile ad fraud- and adware-related incidents became so rampant last year that it cost businesses hefty financial losses.

Posted on:January 10, 2018 at 6:30 am
Posted in:Mobile
Author:
Trend Micro

Last year, we saw the Fanta SDK malware target Russian bank Sberbank users and employ unique defensive measures. Now, another bank malware family has appeared, targeting even more Russian banks while using new and evolved obfuscation techniques. This family is named FakeBank, and so far the related samples we have collected number in the thousands. These samples show that the malware targets not only Sberbank, but also other Russian banks like Letobank and the VTB24 bank.

Posted on:January 9, 2018 at 5:00 am
Posted in:Malware, Mobile
Author:
Lorin Wu (Mobile Threats Analyst)

We spotted a malicious app (detected by Trend Micro as ANDROIDOS_BKOTKLIND.HRX) that appears to be the first developed using Kotlin—an open-source programming language for modern multiplatform applications. The samples we found on Google Play posed as Swift Cleaner, a utility tool that cleans and optimizes Android devices. The malicious app, which has 1,000-5,000 installs as of writing, is capable of remote command execution, information theft, SMS sending, URL forwarding, and click ad fraud. It can also sign up users for premium SMS subscription services without their permission.

Posted on:December 26, 2017 at 5:00 am
Posted in:Malware, Mobile
Author:
Veo Zhang (Mobile Threats Analyst)

Android’s regular security update for December 2017 included a fix for a serious vulnerability that could allow attackers to modify installed apps without affecting their signature. This would allow an attacker to gain access to the affected device (indirectly). First found by researchers in July, this vulnerability (designated as CVE-2017-13156, and also called the Janus vulnerability) affects versions of Android from 5.1.1 to 8.0; approximately 74% of all Android devices have these versions installed.

Posted on:December 18, 2017 at 5:00 am
Posted in:Malware, Mobile
Author:
Ecular Xu (Mobile Threat Response Engineer)

Earlier this year researchers first disclosed a targeted attack campaign targeting various sectors in the Middle East. This threat actor was called Two-tailed Scorpion/APT-C-23. Later on, a mobile component called VAMP was found, with a new variant (dubbed FrozenCell) discovered in October.

Page 1 of 612 › »

Adware Posing as 85 Photography and Gaming Apps on Google Play Installed Over 8 Million Times

New Mobile Malware Uses Layered Obfuscation and Targets Russian Banks

First Kotlin-Developed Malicious App Signs Users Up for Premium SMS Services

Janus Android App Signature Bypass Allows Attackers to Modify Legitimate Apps

New GnatSpy Mobile Malware Family Discovered

Security Predictions for 2020

Business Process Compromise

Stay Updated

Adware Posing as 85 Photography and Gaming Apps on Google Play Installed Over 8 Million Times

New Mobile Malware Uses Layered Obfuscation and Targets Russian Banks

First Kotlin-Developed Malicious App Signs Users Up for Premium SMS Services

Janus Android App Signature Bypass Allows Attackers to Modify Legitimate Apps

New GnatSpy Mobile Malware Family Discovered

Security Predictions for 2020

Business Process Compromise

Popular Posts

Stay Updated