Google removes 6 malicious apps with 2 lakh downloads

New Delhi, Sep 2 (IANS) Cybersecurity researchers on Wednesday said they discovered six apps on Google Play store with over 2 lakh downloads in total that were infected with the infamous Joker malware.

New Delhi, Sep 2 (IANS) Cybersecurity researchers on Wednesday said they discovered six apps on Google Play store with over 2 lakh downloads in total that were infected with the infamous Joker malware.

The apps are: Convenient Scanner 2, Safety AppLock, Push Message-Texting & SMS, Emoji Wallpaper, Separate Doc Scanner and Fingertip GameBox, reports cyber security firm Pradeo.

“The infected applications have now been deleted from Google Play, but are still installed on the devices of their users,” Pradeo said.

Joker is a malicious bot (categorised as Fleeceware) whose main activity is to simulate clicks and intercept SMS to subscribe to unwanted paid premium services unbeknownst to users.

By using as little code as possible and thoroughly hiding it, Joker generates a very discreet footprint that can be tricky to detect.

In the last year, the malware was found hiding in hundreds of apps.

“Users are advised to immediately delete them from their device to avoid fraudulent activities,” the cyber security firm advised.

Google has removed over 1,700 apps containing Joker malware from the Play Store since 2017.

In July this year, researchers at cybersecurity firm Check Point discovered a new variant of the Joker Dropper and Premium Dialer spyware in Google Play.

Hiding in seemingly legitimate applications, this updated version of Joker was able to download additional malware to the device, which subscribes the user to premium services without their knowledge or consent.

Joker, one of the most prominent types of malware for Android, keeps finding its way into Google’s official application market as a result of small changes to its code, which enables it to get past the Play store’s security and vetting barriers.

–IANS

na/

ANA NEWS WIRE Disclaimer:
The African News Agency (ANA) is a news wire service and therefore subscribes to the highest standards of journalism as it relates to accuracy, fairness and impartiality.
ANA strives to provide accurate, well sourced and reliable information across Text, Images and Video. Where errors do appear, ANA will seek to correct these timeously and transparently.
The ANA platform also contains news and information from third party sources. ANA has sought to procure reliable content from trusted news sources but cannot be held responsible for the accuracy and opinions provided by such sources on the ANA platform or linked sites.
The content provided for on the ANA News Wire platform, both through the ANA news operation and via its third party sources, are for the sole use of authorised subscribers and partners. Unauthorised access to and usage of ANA content will be subject to legal steps. ANA reserves its rights in this regard.
ANA makes every effort to ensure that the website is up and running smoothly at all times, however ANA does not take responsibility for, and will not be held liable for times when the website is temporarily unavailable due to technical issues that are beyond our control.