New Android App Trojan Identified in Over 100 Million Downloads

Security researchers have found a nasty Trojan in a large number of apps in the Google Play Store. The virus not only ensures that your data is no longer safe, but you can also lose money. In the meantime, the research team speaks of damage likely to number in the hundreds of millions.


TL; DR

  • Nearly 500 Android apps are infected with a dangerous Trojan horse.
  • The Trojan works like most viruses on smartphones and costs you money every month.
  • Over 100 million downloads have been recorded to date.

Do you have time for a scary horror story? Okay, so it goes: the Google Play Store with over 2 million apps is the place to go for most Android owners. However, it happens again and again that some apps get infected with a virus. Even if you’re sure the app is virus-free when you download it, that’s not necessarily the case. The security team of Zimperium has now found another new trojan in many applications and gave it the cute name “Dark Herring”.

Dark Herring is a virus that has appeared more often in the Google Play Store. The host applications seem serious enough at first glance and the requested permissions do not suggest a virus either. As a result, you download the app to your smartphone and a process is already underway that is not easy to stop.

In the process, your IP address is transmitted to a server and you are redirected to a website. This page is adapted to the language of the device and you must enter your mobile number for verification. Once you’ve done this, you’ll be charged around $15 on your next phone bill. The Trojan simply signs you up for premium services.

Immense damage and more than 70 countries affected

The problem is that network providers usually show no mercy and you still have to pay the money. This has caused damage which, according to Zimperium’s estimates, is already in the hundreds of millions. There are 470 infected apps which have been distributed in over 70 countries. Germany, Austria and Switzerland are also affected. In addition, these are applications that have been widely distributed. Cybercriminals have spread the wallet so much that applications of all categories can be found.

The distribution of the 470 applications is widely distributed! / © Zimperium

You can find out if such an application is on your smartphone in a table. All infected applications have been listed on Github.com. It is better to delete them from your smartphone as soon as possible. The Play Store has also reacted in the meantime and removed all the applications in question from the store, but this does not protect you if you have such an application on your smartphone. Hope the spooky story wasn’t too scary – but beware of the Dark Herring!

Infected apps with over a million installs

App name package name
AirPlay Pro com.provideos.airplaypro
Launch it com.castis.casiits
City Bus Simulator 2 com.bussdriv.citydrivebusimu
Connectool com.combineapparatus.connecttool
Connection box Pro com.proconnector.boxconnector
accident king com.crashingking.kingcrashgame
Driving simulator com.dsim.driversimulator
Driving day com.day.drivingday
Evo Driving Rover Club Pro com.roverproed.evoprodriverover
Soccer HERO 2021 com.starbestfootball.footballhero
football legends com.football.legendsfutballl
GameX Lab com.ggamml.labbgam
Grand Mafia Auto com.grandmafiauto.gma
My Pro Translator com.mytraslt.translpro
New mobile games com.nmg.newmgames
Offroad jeep simulator com.gmofftrack.offroadjeepgm
Pro Photography Labs com.exhibition.photolabpro
Pictasia com.picmkedit.pictasia
Project X com.px.projxapp
racing city com.townrally.racingcity
Smashed com.mixcrashing.smashex
Smashex Pro com.pro.smashexpro
Speedy Cars – Last Lap com.speedlap.finalcarslap
Stream in HD com.highstream.appstreamhd
StreamCastPro com.strmcas.strmmpro
Professional Translation com.trasslat.prootrast
Ultra Flux com.ulttistrm.strmultr
Upgrade com.upgrrdm.gradmup
video projector com.videoenterprise.videoprojector
VideoProj Lab com.vdoprolab.projectlab
Vidly Vibe com.vibe.vidlyvibe
VStudio Pro com.proveditstation.vstudiopro
WallpArt Pro com.wartpro.wallproart

What do you think of the virus? Have you ever had a Trojan horse like Dark Herring or the Joker on your smartphone? Let us know in the comments!

Comments are closed.