These antivirus apps distributed malware

They were infected with the Sharkbot malware that steals passwords and banking information. Google has since removed the apps from the Play Store.

Google has removed six fake antivirus apps from the Play Store after using them for distributing Malware were used reported techradar.com (engl.).

The malicious apps were infected with Sharkbot – malware that steals passwords and banking information. Sharkbot shares push notifications and offers fake login prompts to trick users into providing their credentials to the cyber criminals.

Experts from Check Point Research write in this Blog entry (engl.) that at least six different apps had spread the malware. After Check Point Research (CPR) revealed this, the applications were removed from the Google Play Store.

The following Android apps are affected:

  1. Atom Clean-Booster, Antivirus
  2. Antivirus, Super Cleaner
  3. Alpha Antivirus, Cleaner
  4. Powerful Cleaner, Antivirus
  5. Center Security – Antivirus (two versions)

    The fake antivirus apps

    (Those: blog.checkpoint.com)

The applications were downloaded more than 15,000 times in total. According to their own statements, the security experts at CPR identified around 1,000 unique IP addresses of infected devices during the analysis.

Four applications come from three developer accounts: Zbynek Adamcik, Adelmio Pagnotto, and Bingo Like Inc. Although some apps associated with these accounts have been removed from the Play Store, they are still in unofficial markets, according to Check Point Research.

If you have installed one of the apps mentioned, uninstall it immediately.


Source: com! professional by www.com-magazin.de.

*The article has been translated based on the content of com! professional by www.com-magazin.de. If there is any problem regarding the content, copyright, please leave a report below the article. We will try to process as quickly as possible to protect the rights of the author. Thank you very much!

*We just want readers to access information more quickly and easily with other multilingual content, instead of information only available in a certain language.

*We always respect the copyright of the content of the author and always include the original link of the source article.If the author disagrees, just leave the report below the article, the article will be edited or deleted at the request of the author. Thanks very much! Best regards!