Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Share Post: Reddit Facebook
Doctor Web detects infected games on Google Play with more than 4,500,000 downloads
#1
Quote:Doctor Web virus analysts have found several games on Google Play that contain [b]Android.RemoteCode.127.origin. It covertly downloads and launches additional modules that perform various malicious actions. For example, they simulate user actions by covertly opening websites and clicking on their items.[/b]
Android.RemoteCode.127.origin is a part of a framework (SDK, Software Development Kit) called 呀呀云 (Ya Ya Yun). Developers use it to extend the functionality of their applications. Particularly, it allows gamers to maintain communication with each other. However, besides the indicated possibilities, the platform performs the Trojan’s functions. It covertly downloads malicious modules from a remote server.
Once the programs with the embedded SDK are launched, Android.RemoteCode.127.origin makes a request to the command and control (C&C) server. As a response, it can receive a command to download and launch malicious modules capable of many actions. Doctor Web specialists intercepted and inspected one such module, and dubbed it Android.RemoteCode.126.origin. Once launched, it connects to its C&C server and receives a link to download an allegedly benign image.

source: https://news.drweb.com/show/?i=11685&lng=en&c=14
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Android malware apps with 2 million installs spotted on Google Play tarekma7 0 622 12-05-2022 , 04:09 PM
Last Post: tarekma7
  New Android malware on Google Play installed 3 million times mrtrout 0 649 07-14-2022 , 02:55 AM
Last Post: mrtrout
  SharkBot malware hides as Android antivirus in Google Play tarekma7 0 950 03-05-2022 , 05:47 PM
Last Post: tarekma7
  Malicious apps on Google Play dropped banking Trojans on user devices Bjyda 0 1,283 03-10-2021 , 12:17 AM
Last Post: Bjyda
  Google Wants Chrome to Play Nice with Windows 10 Antivirus Software mrtrout 0 1,044 12-01-2020 , 02:34 AM
Last Post: mrtrout

Forum Jump:


Users browsing this thread: 1 Guest(s)