Researchers have discovered more malicious Android apps on the Play Store. They specifically noticed numerous adware-delivering Android games and camera apps that evaded Play Protect.
Researchers from Trend Micro have reported multiple malicious apps targeting Android users with malware. Reportedly, they discovered 49 different adware-delivering Android games and camera apps with over 3 million downloads. These apps not only infected users but also utilised various security evasion features to bypass Play Protect.
As elaborated in their blog post, the apps, after installation, delivered full-screen ads on the devices. The ads provided no viable option to the users to close, compelling them to press back or home key.
Moreover, those apps also disguised their icons to bluff the users. The following image lists all 49 adware-delivering apps.
In addition, the apps also applied various behaviors to evade Google’s app vetting, including,
- Heavy code obfuscation
- Strings encryption with a custom algorithm
- Adware shortcut disguised as a popular browser
- Different actions based on Android versions
- Registration as a foreground service to continue running with no user interaction
- Prolonged delay time