CSIS security experts have identified a new Android malware called Joker, present in 24 apps regularly offered on the Google Play Store and which together total almost half a million downloads. According to the report published last week, the threat has the ability to obtain user credentials and use them to purchase subscription services inside or outside the Google store, causing financial losses that can only be perceived on the credit card statement. . Brazil is one of the countries potentially affected by the malware. Infected apps have already been removed from the Play Store.
Android phones are vulnerable to SMS phishing attack
Malware can cause financial losses to victims – Photo: Reproduction / Rodrigo Fernandes
Want to buy cell phones, TV and other discounted products? Discover Compare dnetc
According to Aleksejs Kuprins, an expert who discovered malware in action, the Joker it has a mechanism that adapts its behavior to certain regions. If the malware detects, by means of the telephone number, that the user is from a specific country, it can simply be inactive – a measure that can be a precautionary measure not to affect people in certain locations.
Another observation from the expert is that the Joker may have a Chinese origin, due to comments available in the threat code – excerpts that developers put in the middle of the source code to facilitate future interventions and maintenance.
Found in at least 24 different apps, which together add up to 472 thousand downloads, the Joker it can even cause damage that goes unnoticed by the victims. Since application subscription services tend to charge small fees, you can spend months paying the fees.
Check out the list of apps that contain the Joker:
- Advocate Wallpaper
- Age Face
- Altar Message
- Antivirus Security – Security Scan
- Beach Camera
- Board picture editing
- Certain Wallpaper
- Climate SMS
- Collate Face Scanner
- Cute Camera
- Dazzle Wallpaper
- State Message
- Display Camera
- Great VPN
- Humor Camera
- Ignite Clean
- Leaf Face Scanner
- Mini camera
- Print Plant scan
- Rapid Face Scanner
- Reward Clean
- Ruddy SMS
- Soby Camera
- Spark Wallpaper
If you have used any of these apps, the recommendation is that you uninstall the program and review your subscription page, available both in the web version and in the Play Store app. Another key step is to check your credit card bills since June, when the malware started operating. It is also always important to check the developer before downloading an app and keeping an antivirus installed on your smartphone – see the best options for Android.
How to remove viruses on an Android phone
Is downloading GBWhatsApp por APK safe or virus? See in the dnetc Forum