Malicious Android Apps Archives

Malicious Android ‘Vapor’ apps on Google Play installed 60 million times

19Mar

By RBNo Comments

News

Malicious Android ‘Vapor’ apps on Google Play installed 60 million times

More than 300 malicious Android apps that sought to steal credit card numbers and credentials or operate as adware downloaded 60 million things from Google Play. IAS Threat Lab initially discovered the operation, classifying the malicious activity as "Vapor" and stating that it has been going on since early 2024. 180 apps were found by IAS to be a part of the Vapor campaign, which generates 200 million fake bid requests every day in order to commit widespread ad fraud. According to a recent Bitdefender analysis, there are now 331 dangerous apps, with several infections reported in South Korea, Brazil, the US, Mexico, and Turkey. According to Bitdefender, the apps show out-of-context advertisements read more about Malicious Android 'Vapor' apps on Google Play installed 60 milli...

Over 90 malicious Android apps with 5.5M installs found on Google Play

With the Anatsa banking trojan experiencing a recent spike in activity, over 90 malicious Android apps have been identified installed over 5.5 million times through Google Play to distribute malware and adware. A banking trojan called Anatsa (also known as "Teabot") targets more than 650 apps used by financial institutions across Asia, Europe, the US, and the UK. It aims to carry out fraudulent activities by stealing users' e-banking credentials. Threat Fabric stated in February 2024 that Anatsa has used a variety of phony productivity software apps on Google Play to obtain at least 150,000 infections since the end of the previous year. Anatsa has made a comeback to the official Android app market, according to Zscaler, and is currently available through two spoof apps called rea...

200+ Malicious Android Apps Targeting Iranian Banks

In order to stay under the radar, an Android malware campaign that targets Iranian banks has increased its functionality and added new evasion techniques. According to a recent Zimperium report, the threat actor was also seen executing phishing attacks against the targeted financial institutions. The report also found over 200 malicious apps connected to the malicious operation. The campaign was initially made public in late July 2023 after Sophos published information about a collection of 40 apps that harvest credentials from users of Bank Mellat, Bank Saderat, Resalat Bank, and the Central Bank of Iran. The main objective of the fraudulent applications is to deceive users into giving them excessive permissions read more 200+ Malicious Android Apps Targeting Iranian Banks. G...