Home

Apr 2, 2020

Tekya Malware Targets 1 Million Android Users Through Malicious Apps On Play Store

authorarticle: Master3395
android.jpg
video: 
youtube: 
sources: 
keywords: ad fraud, android, android app, Android app malware, Android Apps, android apps containing malware, android apps evade app permission, Android apps evade Google security, android apps evade Play Protect, android device, Android devices vulnerable, android
Category: Google
Posted by: Admin

While Google employs some tough policies for app developers to keep the Play Store safe, yet it never remains so. Once again, criminal hackers managed to ditch Google’s policies and flood the Play Store with malicious Android apps.

This time, they target users with Tekya malware distributed via numerous apps with almost 1 million downloads.

Tekya Malware In Malicious Android Apps Researchers from Check Point Research has found further Android malware targeting users via Google Play Store. They found multiple Android apps that looked safe but actually contained Tekya malware. Elaborating on their findings in a post, researchers stated that they observed around 56 apps on Play Store exhibiting malicious behavior.

Of these, 24 specifically aimed at children as they impersonated various kids’ apps, such as games and puzzles. Whereas the remaining impersonated utility apps such as calculators, translators, cooking apps, etc. Upon downloading the app, the malware installs and executes on the target device. While the technical details of Tekya are available in the researchers’ post, in brief, it primarily serves ad fraud purposes.

With the goal of committing mobile ad fraud, the malware – dubbed ‘Tekya’ – imitates the user’s actions in order to click ads and banners from agencies like Google’s AdMob, AppLovin’, Facebook, and Unity.

To evade detection by Google Play Protect, the malware obfuscates the native code. It then leverages ‘MotionEvent’ feature on Android phones to imitate the victim’s actions for generating clicks. Together, these malicious Android apps had a total number of downloads of about 1 million. In other words, these apps potentially risked the security of around 1 million users. Apps Removed, But Threat Remains Check Point researchers have confirmed that Google has removed all the malicious apps detected in their study. The developers also removed a couple of those apps from the Play Store. So, at present, users are safe from Tekya malware. Nonetheless, this doesn’t mean that the threat is over. At any point, cybercriminals may flood Play Store with malicious apps to spread other malware, especially the unknown ones, just like Tekya that remained undetected by VirusTotal and Play Protect. As stated by the researchers,

There are nearly 3 million apps available from the store, with hundreds of new apps being uploaded daily – making it difficult to check that every single app is safe.  Thus, users cannot rely on Google Play’s security measures alone to ensure their devices are protected.

Let us know your thoughts in the comments.

authorarticle: Master3395
android.jpg
video: 
youtube: 
sources: 
keywords: ad fraud, android, android app, Android app malware, Android Apps, android apps containing malware, android apps evade app permission, Android apps evade Google security, android apps evade Play Protect, android device, Android devices vulnerable, android

Comments:

comments powered by Disqus

Return

Sponsored Ads:

Discord

Page 1 of 547  >  >>

We've been waiting for years for this Xbox enhancement

xbox.webp

Aug 4, 2020 | Category: General | Comments

This is how the new game store on Xbox Series X will be.

read more…

Numerous Malicious Photo Blur Apps Appeared On Play Store

google.jpg

Aug 3, 2020 | Category: Google | Comments

Researchers spotted numerous malicious photo blur apps targeting Android users.

These apps actually constituted a dedicated campaign targeting users with adware. While Google removed the apps, make sure you don’t have them on your devices too.

read more…

News Targeted Discord

NewsTargeted.png

Aug 2, 2020 | Category: General | Comments

NT is a multipurpose fast Discord bot for any server, Active development - new features added regularly custom commands.

read more…

Page 1 of 547  >  >>