They were infected with the Sharkbot malware that steals passwords and banking information. Google has since removed the apps from the Play Store.
The malicious apps were infected with Sharkbot – malware that steals passwords and banking information. Sharkbot shares push notifications and offers fake login prompts to trick users into providing their credentials to the cyber criminals.
The following Android apps are affected:
- Atom Clean-Booster, Antivirus
- Antivirus, Super Cleaner
- Alpha Antivirus, Cleaner
- Powerful Cleaner, Antivirus
- Center Security – Antivirus (two versions)
The fake antivirus apps
(Those: blog.checkpoint.com)
The applications were downloaded more than 15,000 times in total. According to their own statements, the security experts at CPR identified around 1,000 unique IP addresses of infected devices during the analysis.
Four applications come from three developer accounts: Zbynek Adamcik, Adelmio Pagnotto, and Bingo Like Inc. Although some apps associated with these accounts have been removed from the Play Store, they are still in unofficial markets, according to Check Point Research.
If you have installed one of the apps mentioned, uninstall it immediately.
Source: com! professional by www.com-magazin.de.
*The article has been translated based on the content of com! professional by www.com-magazin.de. If there is any problem regarding the content, copyright, please leave a report below the article. We will try to process as quickly as possible to protect the rights of the author. Thank you very much!
*We just want readers to access information more quickly and easily with other multilingual content, instead of information only available in a certain language.
*We always respect the copyright of the content of the author and always include the original link of the source article.If the author disagrees, just leave the report below the article, the article will be edited or deleted at the request of the author. Thanks very much! Best regards!