Fresh Android adware discovered inside over 200 applications on Play Store

Security researchers recently came across one novel form of adware targeting mobile phones as it hides inside a large number of Android applications. The adware has had over 150m download attempts from Google's Play Store. Understandably, over 200 apps contained the malware.

Check Point the cyber-security firm reported to BleepingComputer that the said applications carrying the adware have been dubbed 'SimBad' because these in general were racing as well as driving simulator games. In all, there were more than 150m installs for the apps, with the "Snow Heavy Excavator Simulator" application getting more than 10m installs.

The security firm stated the malware lurked within a so-called popular software development kit for ads whose provider is addroider[.]com. After getting loaded, SimBad gets commands that its C&C server sends, particularly a command that it should wipe its icon, this for making the application very difficult for eliminating. Subsequently, it starts exhibiting advertisements in the background while is capable of opening any web-link inside the Web-browser active on the phone.

This feature of opening any web-link inside a Web-browser enables the SimBad perpetrator to create phishing pages to execute even spear-phishing assaults against the mobile owner. The perpetrator also has the ability to load one remote app that some specific server hosts, thereby letting him to load fresh malicious programs when required. As per Check Point's researchers, whilst SimBad seems functioned for delivering ads currently, it's equipped with the means for growing into a far bigger e-threat. Gizmodo.com posted this, March 13, 2019.

There are three distinct groups which divides the capabilities of SimBad. These are bearing contact with other apps, phishing, and exhibiting ads.

Check Point uncovered the above malware laced applications, 28th January 2019, after which it notified Google about them. Google subsequently issued a confirmation to the researchers that it eliminated those applications, 22nd February 2019. The adware carrying app campaign once again highlights the need for Android users to peruse the reviews accompanying an application prior to downloading one.

» SPAMfighter News - 3/15/2019