Android games are now on trending. Everyone is after the games. Hackers targeted this. Over half a million Android users who have downloaded a set of driving apps have been hacked.
There are total 13 applications, all are for driving simulation in some way.
According to ESET security researcher Lukas Stefanko tweet
Don't install these apps from Google Play – it's malware.
Details:
-13 apps
-all together 560,000+ installs
-after launch, hide itself icon
-downloads additional APK and makes user install it (unavailable now)
-2 apps are #Trending
-no legitimate functionality
-reported pic.twitter.com/1WDqrCPWFo— Lukas Stefanko (@LukasStefanko) November 19, 2018
All the apps are published by a developer under the name Luiz O Pinto. the total number of installs is over 560,000.
The Android apps include luxury car driving, motocross, a truck cargo simulator, and fire truck simulations. The apps are very similar graphics like legitimate applications.
After installed, the apps hide themselves and their shortcut icons. After that this app requesting that the user download and install an additional .APK at the same time.
The app displays ads without permission when the mobile device is unlocked. Some previous users have reported that this app is the cause of device slowdown.
After reported Google has removed the apps from play store. Google spokesperson Scott Westover told TechCrunch that the apps “violated our policies and have been removed from the Play Store.”
It appears that apps are violating privacy of Google and deploying malware in Android devices. Such malware runs in the background and harvest private data of users and sell the data to the advertiser.
If you believe you are a victim of this security flaw, then you may scan your phone to clean up your mobile device. Alternatively, uninstalling the app directly from Android settings is possible. The second one may be the best option.
