Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Run, Jump, Shoot, Infect: Trojanized Games Invade Google Play
Newest First  |  Oldest First  |  Threaded View
lorine34
50%
50%
lorine34,
User Rank: Strategist
10/19/2015 | 11:52:45 AM
Re: Who to blame?
Trojanized Games Invade many plateforms
amitsaga
50%
50%
amitsaga,
User Rank: Apprentice
9/27/2015 | 5:34:38 PM
whom to blame
Interesting view. My view is that, there is no reason to blame anyone..
nomii
50%
50%
nomii,
User Rank: Apprentice
9/24/2015 | 12:42:32 PM
Re: Who to blame?

Failing to clean up the site is a big negative for the site runners. They must have lost a large part of users who thinks that what if other games are also infected. These sites need to work to win back the trust of its users which is fast moving away. Google play store is a big banner and people trust its reputation. If these things can happen at their site I am afraid what will be the condidtion of the site which are not very popular. ?

nomii
50%
50%
nomii,
User Rank: Apprentice
9/24/2015 | 12:38:24 PM
Who to blame?

Interesting. I am not sure whom to bame here. Either its the management of google play store or the user. The sufferers are eventually the end users. These kind of malicious softwares seems to be there for ever. The remidial measures are always launched after the trojan has bloomed to millions. Does it sound any alarm on wrong intentions. I am really sensing something fishy in that. Do you?



Edge-DRsplash-10-edge-articles
7 Old IT Things Every New InfoSec Pro Should Know
Joan Goodchild, Staff Editor,  4/20/2021
News
Cloud-Native Businesses Struggle With Security
Robert Lemos, Contributing Writer,  5/6/2021
Commentary
Defending Against Web Scraping Attacks
Rob Simon, Principal Security Consultant at TrustedSec,  5/7/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-23691
PUBLISHED: 2021-05-14
YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.
CVE-2020-18166
PUBLISHED: 2021-05-14
Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension to the component "admin/wenjian.php?wj=../templets/pc".
CVE-2020-18167
PUBLISHED: 2021-05-14
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu".
CVE-2020-23689
PUBLISHED: 2021-05-14
In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.
CVE-2021-25941
PUBLISHED: 2021-05-14
Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.