June 21, 2018

A unsafe virus has attacked Google Play

17 September 2017, 03:42 | Dale Webster

21 million users fall victim to second Google Android malware attack

ExpensiveWall: Banking Trojan targets Android users with fake SMS messages

Real money poker apps from the three leading poker sites (PokerStars, 888poker and partypoker) are now available in the Google Play mobile app store in the UK.

Google did not respond immediately to a request seeking comment on whether the company had notified Play customers who had downloaded the malware to urge them to uninstall the malware. Based on other reviews, the researchers from Check Point believe that the apps were also promoted on social media networks through ads.

The ExpensiveWall app used a method through which malicious content was effectively hidden from anti-malware protections that were integrated into Google Play Store.

The malware family uses a common obfuscation technique known as packing that enables apps to hide their maliciousness from Google's scanners by compressing or encrypting the executable file before it's uploaded to Play Store.

These apps followed example from the ExpensiveWall which is a malware photo app that has infected a lot of users this year. Not only did it force people to sign up with subscriptions via SMS, but it was also able to remotely install applications as well as leaking user information including the phone number, Global Positioning System location, installed apps, and IP address.

The aim of the game for the gang behind it is to make money by forcing victim devices to register with premium rate services and then send expensive SMS messages, often without the user's knowledge. It derives its name from one of the apps it uses to infect devices called Lovely Wallpaper.

The ExpensiveWall malware has infected at least 50 apps and was been downloaded between 1 million and 4.2 million times before the affected apps were removed, CheckPoint reported citing Google Play data. It was downloaded a million times, but it showed that even Google's best safeguards aren't able to keep malware away 100% of the time.

Daniel Padon, one of the researchers at Check Point said that the massive amount of apps were a malicious campaign which infiltrated Google Play Store. Most probably, this time the malicious app has infected more than 5,000 devices before it was removed four days later. And this is because this month they've been dealing with over 50 apps that were infested with malware.

Until today if you wanted to find an Assistant App you had to go through the discover tab app by app as they were listed in the various categories.

Other News

Trending Now

DR Congo security forces shoot dead 37 Burundi migrants
Around 36,000 are in DR Congo, mainly in the overcrowded camp of Lusenda, in the east, or several transit camps. According to he BBC, the United Nations has called for an investigation into exactly what happened.

Gamecocks lose star receiver Deebo Samuel for the season
Tailback Benny Snell bruised his ribs in last week's win over Eastern Kentucky, but is expected to play. Samuel came into Saturday with two 97-yard kickoff returns for touchdowns and two receiving touchdowns.

U.S. citizen fighting for Islamic State surrenders in Syria
The officials did not give the exact location of the surrender nor the current location of the American. As various fighting forces win victories against ISIS , their focus turns toward Deir Ezzor.

Criminal probe opens into 8 deaths at Florida nursing home after Irma
She said some of the 15,000 residents at Century Village were vulnerable and "we are concerned about their welfare". As of Wednesday, almost 60 percent of customers had electricity restored , according to Florida Power & Light.

At least four killed in traffic collision in British south Gloucestershire
Highways England stated there was six miles of traffic congested northbound of the closure, and two miles stretching southbound. The lorry that has slammed has hit what M5 workers will know as a well-known historic point, a windsock beside the street.

DPRK Condemns Additional THAAD Deployment in South Korea
Sources have said Chinese companies shipping oil to the North will also probably be targeted by future USA sanctions. The North wants South Korea to stop its annual drills with the United States , which it views a rehearsal for war.

Week 2 GameScout: Vikings at Steelers
But Brown has proven time after time that he can get open against just anyone with four straight 100-catch seasons. And frankly, this injury lingering for any substantial amount of time could be wildly detrimental to Minnesota.

Four arrests as Arsenal match delayed amid crowd disorder
Back Alvaro Morata to score anytime in a 2-0 win at 14/1. Arsenal are 7/2 for the away win, and the draw is 3/1. So happy he has refused to sign a new deal.

Power out for 2.2 million as restoration continues
Meanwhile, roughly 6.4 million people in the state remained without power as of Wednesday afternoon, down from 13 million . In Jacksonville, electricity has been restored to almost a quarter-million homes and businesses at 2 p.m.

Congress must act to protect dreamers
Watch the full interview with CBN's Heather Sells and Alan Cross following the president's decision on DACA. And they also don't want a deal in which their DACA status is a tradeoff for enhanced border security.