According to MalwareFox, hackers have been downloading “clean” apps from the Play Store, decrypting them, injecting malicious code into these apps, and then reuploading them to Google’s app store under new names, tricking users into installing these fake apps.
Security experts at MalwareFox have stated that these apps have had code from three types of spyware injected into them: Joker, Harly, and Autolycos.
According to MalwareFox experts, Joker is spyware that collects contacts, reads and steals SMS messages, and gathers detailed information from infected smartphones. Joker malware can also automatically subscribe victims to paid services and take their money without them knowing.
Autolycos malware operates similar to Joker, in that it reads and steals SMS messages and automatically subscribes victims to paid services to steal their money.
On the other hand, Harly malware collects data about infected devices, including information about mobile networks and user habits.
When users install apps containing this spyware, they silently steal personal and sensitive information from smartphones by reading SMS messages, stealing contacts, or even automatically subscribing the user’s phone number to paid services to steal their money without their knowledge.
Two of the spyware-infected apps were discovered by MalwareFox experts (Image: PCRick)
What is concerning is that these spyware-infected apps are being directly distributed on Google’s Play Store, leading many Android users to unknowingly install them without realizing that they contain spyware inside.
MalwareFox security experts have compiled a list of spyware-infected apps that the company has detected, including apps that have been downloaded millions of times:
– Simple Note Scanner
– Universal PDF Scanner
– Private Messenger
– Premium SMS
– Blood Pressure Checker
– Cool Keyboard
– Paint Art
– Color Message
– Fare Gamehub and Box
– Hope Camera-Picture Record
– Same Launcher and Live Wallpaper
– Amazing Wallpaper
– Cool Emoji Editor and Sticker
– Vlog Star Video Editor
– Creative 3D Launcher
– Wow Beauty Camera
– Instant Heart Rate Anytime
– Delicate Messenger
– Funny Camera
– Wow Beauty Camera
– Gif Emoji Keyboard
– Razer Keyboard & Theme
– Freeglow Camera 1.0.0
– Coco Camera v1.1
– Biceps Exercise
– Neon – Keyboard – LED
– CameraLens
If users have inadvertently installed any of these apps, they should immediately uninstall them from their devices and use a smartphone security software to scan their devices for assurance of safety.
Source: VTV
