Google has eliminated Chamois apps, which installed invisible apps and downloaded unwanted plugins without victims' knowledge.
Google has removed malicious apps from the Google Play Store after discovering they were tricking users into downloading unwanted apps and plugins. These apps, which sent premium text messages and installed invisible apps in the background without users' consent, were identified as part of the Chamois family.
Bernhard Grill, Megan Ruthven, and Xin Zhao, all Google security software engineers, found and removed the apps -- which they described as one of the largest they have seen -- using malware scanner Verify Apps. Researchers say Chamois apps can evade detection because they keep changing file formats – from .APK file to .JAR file and then to .ELF file.
"This multi-stage process makes it more complicated to immediately identify apps in this family as a PHA because the layers have to be peeled first to reach the malicious part," they explain.
Though there is no official figure from Google about how many were victimized by Chamois botnet, an earlier study found that malware HummingBad made $300,000 per month through ad fraud.
Read more here.
About the Author(s)
You May Also Like
The fuel in the new AI race: Data
April 23, 2024Securing Code in the Age of AI
April 24, 2024Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024