Home

Jan 15, 2020

New Android Trojan Kills Play Protect And Places Fake App Reviews From Infected Devices

authorarticle: Master3395
android_malware_bn.jpg
video: 
youtube: 
sources: 
keywords: android, android app, Android app malware, Android Apps, android apps containing malware, android apps evade app permission, Android apps evade Google security, android apps evade Play Protect, android device, Android devices vulnerable, android malware,
Category: Google
Posted by: Admin

A new Android Trojan now threatens smartphone users. The Shopper.a Android Trojan kills Play Protect and lets the attackers place fake app reviews from infected devices.

About Android Trojan Shopper. Reportedly, researchers from Kaspersky Labs have discovered a new malware that targets Android users. Identified as Shopper.a, this Android Trojan exhibits a high level of maliciousness and different functionalities. The most unique being the ability to boost app reviews.

Elaborating on their findings in a blog post, the researchers stated that the cybercriminals are using this Trojan-Dropper.AndroidOS.Shopper.a to place fake app reviews and increase the number of installations.

Certainly, a feature to lure advertisers by boosting app reputation. Other than boosting the app’s ratings, the malware is also capable of executing other functionalities. Upon reaching a device, the trojan masks itself as a system app named ‘ConfigAPKs’ to trick the user.

Whereas, in the background, the trojan continues its malicious activities. This includes exploiting the Android Accessibility Service for providing limitless possibilities for abusing the target devices. As stated by the researchers,

The lack of installation rights from third-party sources is no obstacle to the Trojan — it gives itself the requisite permissions through AccessibilityService…

With permission to use it, the malware has almost limitless possibilities for interacting with the system interface and apps. For instance, it can intercept data displayed on the screen, click buttons, and emulate user gestures.

The malware can kill Google Play Protect, install apps, show ads, post fake reviews to the apps, and can register the target users to various apps via their Google or Facebook accounts. Malware Already In The Wild The researchers observed active Shopper. campaigns in the wild.

Though, the malware predominantly disseminated in Russia, particularly during October-November 2019. It also targeted users in Brazil and India as well.

Like always, Android users must remain vigilant while installing apps.

Make sure to review the permissions an app requires, check the relevancy of reviews to the app functionalities, and never download apps from third-party sources. Let us know your thoughts in the comments.

authorarticle: Master3395
android_malware_bn.jpg
video: 
youtube: 
sources: 
keywords: android, android app, Android app malware, Android Apps, android apps containing malware, android apps evade app permission, Android apps evade Google security, android apps evade Play Protect, android device, Android devices vulnerable, android malware,

Comments:

comments powered by Disqus

Return

Sponsored Ads:

Discord

Page 1 of 573  >  >>

What's in the latest Edge update? Rollbacks and new browser telemetry policies

Edge.jpg

Oct 20, 2020 | Category: Microsoft | Comments

Microsoft's Edge 86 includes a "rollback" function that lets IT admins restore an earlier version of the browser and gives the built-in PDF viewer support for document tables of content.

read more…

What the new iPhone 12 means for 5G

apple.jpg

Oct 19, 2020 | Category: Apple | Comments

By now, you’ve probably heard that Apple’s iPhone 12 lineup will have 5G capabilities. And you have also probably heard us discuss how 5G speeds are still only available in some parts of the country with some carriers. 

read more…

Microsoft ends support for Office 2010, bangs the Office 365

Office.jpg

Oct 18, 2020 | Category: Microsoft | Comments

Microsoft on Tuesday reminded customers that Office 2010 and Office 2016 for Mac have received their final security updates, as the suites have now dropped off the company's support list.

read more…

Page 1 of 573  >  >>