Android adware apps on Google Play amass two million installs

Several malicious Google Play Android apps installed complete 2 cardinal times push intrusive ads to users while concealing their beingness connected nan infected devices.

In their latest monthly mobile threat report, Doctor Web's analysts identified trojans connected Google Play associated pinch nan 'FakeApp,' 'Joker,' and nan 'HiddenAds' malware families.

Of peculiar liking are nan pursuing 4 adware (HiddenAds) apps disguised arsenic games:

• Super Skibydi Killer – 1,000,000 downloads
• Agent Shooter – 500,000 downloads
• Rainbow Stretch – 50,000 downloads
• Rubber Punch 3D – 500,000 downloads

HiddenAds crippled app connected Google Play (Dr. Web)

Dr. Web explains that erstwhile victims instal these apps connected their devices, they hide by replacing their icons pinch that of Google Chrome aliases utilizing a transparent icon image to create quiet abstraction successful nan app drawer.

These apps tally stealthily successful nan inheritance upon launch, abusing nan browser to motorboat ads and make gross for their operators.

The analysts besides discovered respective apps belonging to nan FakeApp family, which nonstop users to finance scam sites.

In different cases, Dr. Web spotted game apps that loaded dubious online casino websites successful usurpation of Google Play policies. 

Some notable examples of those are:

• Eternal Maze (Yana Pospyelova) – 50,000 downloads
• Jungle Jewels (Vaibhav Wable) – 10,000 downloads
• Stellar Secrets (Pepperstocks) – 10,000 downloads
• Fire Fruits (Sandr Sevill) – 10,000 downloads
• Cowboy's Frontier (Precipice Game Studios) – 10,000 downloads
• Enchanted Elixir (Acomadyi) – 10,000 downloads

Fake app taking users to casino sites (Dr. Web)

Finally, nan antivirus squad spotted 2 Joker family apps connected Google Play, which subscribe users to premium paid services:

• Love Emoji Messenger (Korsinka Vimoipan) – 50,000 downloads
• Beauty Wallpaper HD (fm0989184) – 1,000 downloads

All nan apps presented successful this study person been removed from Google Play by nan clip of writing. 

Still, users who mightiness person installed them successful nan past must delete them instantly and execute a complete instrumentality scan utilizing Play Protect and a mobile antivirus tool.

Dr. Web has besides published a database of hashes for each malicious Android apps its analysts discovered past month on GitHub.

To debar downloading malicious package from Google Play, minimize nan apps you instal to nan minimum required, cautiously publication personification reviews, and execute checks to guarantee nan patient is trustworthy.