- ‘Bitch I’m Bella Thorne’ morphs into TikTok dyslexia meme 3 Years Ago
- Marvel is auctioning props and costumes from Netflix’s ‘Defenders’ franchise 3 Years Ago
- Net neutrality advocates plan online watch party for the ‘Save the Internet’ Act 3 Years Ago
- Tim Cook turns his iPad meme into an AirPod meme Today 11:46 AM
- Auschwitz Memorial asks visitors to stop taking playful photos at Holocaust site Today 11:33 AM
- The best Korean beauty products for $15 or less Today 10:50 AM
- PewDiePie’s reign as the No. 1 YouTuber seems to be over Today 10:43 AM
- Amazon’s ‘Hanna’ miniseries offers a more conventional take on the teen spy thriller Today 10:42 AM
- Conservative writer tweets about bombing a university after women are hired Today 10:16 AM
- YouTube star Ice Poseidon reportedly raided by FBI Today 10:11 AM
- Devin Nunes is threatening to sue more people who mock him on Twitter Today 10:10 AM
- The Economist faces blowback for asking if trans people should be sterilized Today 9:50 AM
- 8 doormats that we can’t believe actually exist Today 9:35 AM
- Why is political blog the Hill publishing op-eds by anti-LGBTQ hate groups? Today 9:16 AM
- A woman vice president? The 2020 men have some thoughts Today 9:00 AM
A sneaky Android virus infected apps in the Google Play Store and third-party markets
Infected apps included fakes of popular games like Candy Crush.
Some of Android‘s most popular games have been tainted by a virus installed in fake versions of the games that lets hackers take control of victims’ phones and add them to a botnet, according to new research from the Slovakian security firm ESET.
Infected games posing as Candy Crush, Temple Run, and Plants vs. Zombies 2 are among those on the Google Play Store that were affected by the Mapin virus from the end of 2013 until the end of 2014. The fake version of Plants vs. Zombies 2 alone was downloaded tens of thousands of times over the course of a year while it was infected, after which it was finally pulled from the store.
The fact that Mapin made it onto Google’s official app store means that it fooled Google’s security software, Bouncer, for nearly a year and a half.
Mapin also hit third-party Android software markets, affecting more than a dozen apps there in the last two years. Many of these apps are still available outside of the official Google Play Store.
Nearly 75 percent of infections have hit India, according to the researchers.
The Mapin trojan takes a patient and clever attack route by waiting a full 24 hours before executing, so that the infected games don’t seem responsible for problematic behavior.
Instead, the user is led to believe that the phone itself asking to install new software called Google Play Update or Manage Settings—authoritative names for nefarious tools.
“The average user will be convinced that this is some important update and at some point is likely to install it just to get rid of this notification,” the researchers told the Daily Dot.
After successfully installing itself, the trojan demands administrative privileges from the user so that it can’t be removed. By then, Mapin has connected back to a command-and-control server through which the hackers can pull the strings.
To add insult to injury, the trojan serves advertisements to the user, interrupting every action with full-screen commercials.
To help protect yourself against threats like this, ESET researchers recommend sticking to trustworthy developers and reading app permission requests closely when installing new software. If a request stands out as unjustifiable, something might be wrong.
Clarification: The apps being attacked by the Android/Mapin Trojan are not the actual popular arcade games, but rather fake versions of those apps that are also available in Google Play as well as third-party stores.
Screengrab via Palo Alto Networks/Google Play
Patrick Howell O'Neill is a notable cybersecurity reporter whose work has focused on the dark net, national security, and law enforcement. A former senior writer at the Daily Dot, O'Neill joined CyberScoop in October 2016. I am a cybersecurity journalist at CyberScoop. I cover the security industry, national security and law enforcement.