New Android App Trojan Identified in Over 100 Million Downloads
Security researchers have found a nasty Trojan in a large number of apps in the Google Play Store. The virus not only ensures that your data is no longer safe, but you can also lose money. In the meantime, the research team speaks of damage likely to number in the hundreds of millions.
TL; DR
- Nearly 500 Android apps are infected with a dangerous Trojan horse.
- The Trojan works like most viruses on smartphones and costs you money every month.
- Over 100 million downloads have been recorded to date.
Do you have time for a scary horror story? Okay, so it goes: the Google Play Store with over 2 million apps is the place to go for most Android owners. However, it happens again and again that some apps get infected with a virus. Even if you’re sure the app is virus-free when you download it, that’s not necessarily the case. The security team of Zimperium has now found another new trojan in many applications and gave it the cute name “Dark Herring”.
Dark Herring is a virus that has appeared more often in the Google Play Store. The host applications seem serious enough at first glance and the requested permissions do not suggest a virus either. As a result, you download the app to your smartphone and a process is already underway that is not easy to stop.
In the process, your IP address is transmitted to a server and you are redirected to a website. This page is adapted to the language of the device and you must enter your mobile number for verification. Once you’ve done this, you’ll be charged around $15 on your next phone bill. The Trojan simply signs you up for premium services.
Immense damage and more than 70 countries affected
The problem is that network providers usually show no mercy and you still have to pay the money. This has caused damage which, according to Zimperium’s estimates, is already in the hundreds of millions. There are 470 infected apps which have been distributed in over 70 countries. Germany, Austria and Switzerland are also affected. In addition, these are applications that have been widely distributed. Cybercriminals have spread the wallet so much that applications of all categories can be found.
The distribution of the 470 applications is widely distributed! / © Zimperium
You can find out if such an application is on your smartphone in a table. All infected applications have been listed on Github.com. It is better to delete them from your smartphone as soon as possible. The Play Store has also reacted in the meantime and removed all the applications in question from the store, but this does not protect you if you have such an application on your smartphone. Hope the spooky story wasn’t too scary – but beware of the Dark Herring!
Infected apps with over a million installs
App name | package name |
---|---|
AirPlay Pro | com.provideos.airplaypro |
Launch it | com.castis.casiits |
City Bus Simulator 2 | com.bussdriv.citydrivebusimu |
Connectool | com.combineapparatus.connecttool |
Connection box Pro | com.proconnector.boxconnector |
accident king | com.crashingking.kingcrashgame |
Driving simulator | com.dsim.driversimulator |
Driving day | com.day.drivingday |
Evo Driving Rover Club Pro | com.roverproed.evoprodriverover |
Soccer HERO 2021 | com.starbestfootball.footballhero |
football legends | com.football.legendsfutballl |
GameX Lab | com.ggamml.labbgam |
Grand Mafia Auto | com.grandmafiauto.gma |
My Pro Translator | com.mytraslt.translpro |
New mobile games | com.nmg.newmgames |
Offroad jeep simulator | com.gmofftrack.offroadjeepgm |
Pro Photography Labs | com.exhibition.photolabpro |
Pictasia | com.picmkedit.pictasia |
Project X | com.px.projxapp |
racing city | com.townrally.racingcity |
Smashed | com.mixcrashing.smashex |
Smashex Pro | com.pro.smashexpro |
Speedy Cars – Last Lap | com.speedlap.finalcarslap |
Stream in HD | com.highstream.appstreamhd |
StreamCastPro | com.strmcas.strmmpro |
Professional Translation | com.trasslat.prootrast |
Ultra Flux | com.ulttistrm.strmultr |
Upgrade | com.upgrrdm.gradmup |
video projector | com.videoenterprise.videoprojector |
VideoProj Lab | com.vdoprolab.projectlab |
Vidly Vibe | com.vibe.vidlyvibe |
VStudio Pro | com.proveditstation.vstudiopro |
WallpArt Pro | com.wartpro.wallproart |
What do you think of the virus? Have you ever had a Trojan horse like Dark Herring or the Joker on your smartphone? Let us know in the comments!
Comments are closed.