Yes, most 2 Million Android users take maintain fallen victim to malware hidden inwards over forty mistaken companion guide apps for pop mobile games, such every bit Pokémon Go too FIFA Mobile, on the official Google Play Store, according to safety researchers from Check Point.
Dubbed FalseGuide past times the Check Point researchers, the malware creates a "silent botnet out of the infected devices" to deliver fraudulent mobile adware too generate holler revenue for cybercriminals.
Nearly 2 Million Android Users Infected!
While initially it was believed that the oldest illustration of FalseGuide was uploaded to the Google Play inwards Feb too made its agency onto over 600,000 devices inside 2 months, farther in-depth analysis past times researchers revealed to a greater extent than infected apps which appointment dorsum to Nov 2016.
"Since Apr 24, when the article below was kickoff published, Check Point researchers learned that the FalseGuide laid upwards on is far to a greater extent than extensive than originally understood," Check Point researchers wrote inwards a blog post.
"The apps were uploaded to the app shop [Google Play Store] every bit early on every bit Nov 2016, pregnant they hid successfully for v months, accumulating an astounding issue of downloads."
Russian connector amongst FalseGuide
Check Point researchers discovered v additional apps containing the FalseGuide malware on Google Play Store, developed past times "Anatoly Khmelenko" (translated from Russian Анатолий Хмеленко).
Also, the kickoff batch of malicious apps was submitted nether the Russian names of 2 mistaken developers, Sergei Vernik too Nikolai Zalupkin, which suggests the malware is of Russian origin.
FalseGuide attempts to plough infected devices into a botnet that could allow its operator to command the devices without the cognition of the device owners.
Here's How FalseGuide Works:
The malware therefore registers itself amongst Firebase Cloud Messaging – a cross-platform messaging service that allows app developers to shipping messages too notifications.
Once subscribed to this service, FalseGuide tin flame allow the attackers to shipping messages containing links to additional malware too install them to the infected device, enabling attackers to display illegitimate pop-up ads out of context too generate revenue.
Depending on their objectives, the attackers could also inject highly malicious code into an infected device to root it, deport a Distributed Denial of Service (DDoS) attack, or fifty-fifty penetrate somebody networks.
Google Removed the Malware hidden Apps, but are y'all Clean?
Check Point has provided a total listing of malicious apps hiding FalseGuide, which posed every bit guides for FIFA Mobile, Criminal Case, Super Mario, Subway Surfers, Pokemon Go, Lego Nexo Knights, Lego City My City, Ninjago Tournament, Rolling Sky, Amaz3ing Spider-Man, Drift Zone 2, Dream League Soccer, too many more.
Check Point researchers notified Google most FalseGuide inwards February, later which the fellowship silently removed the malware apps from the Play Store.
But despite existence removed, the malicious apps are probable all the same active on a issue of devices, leaving Android users opened upwards to cyber attacks.
"Mobile botnets are a growing tendency since early on final year, growing inwards both sophistication too reach," CheckPoint said. "This type of malware manages to infiltrate Google Play due to the non-malicious nature of the kickoff component, which solely downloads the actual harmful code."
How to Protect yourself against such Malware
There are criterion protection measures y'all demand to follow to rest unaffected:
- Always download apps which are from trusted too verified developers too stick to trusted sources, similar Google play Store too the Apple App Store.
- Always verify app permissions earlier installing apps. If whatever app is asking to a greater extent than than what it is meant for, only produce non install it.
- Keep a expert antivirus app on your device that tin flame uncovering too block such malware earlier it tin flame infect your device. Always leave of absence along the app up-to-date.
- Do non download apps from 3rd political party source. Although inwards this case, the app is existence distributed through the official Play Store, most ofttimes such malware are distributed via untrusted third-party app stores.
- Avoid unknown too unsecured Wi-Fi hotspots too Keep your Wi-Fi turned OFF when non inwards use.
- Be careful which apps y'all give administrative rights to. Admin rights are powerful too tin flame give an app total command of your device.
- Never click on links inwards SMS or MMS sent to your mobile phone. Even if the electronic mail looks legit, acquire straight to the website of root too verify whatever possible updates.
