AndroShots

Dangerous games spread viruses on Android

Unsolicited advertising has become the most common modern threat to Android devices in the past year. As a type of malicious code, it has completely eclipsed, for example, previously active stalkerware or banking malware.

As a form of very aggressive and harmful advertising, adware is often associated with violations of user privacy. Although it does not have as severe an impact on user data as, for example, ransomware or banking Trojans, due to its stealthiness it remains hidden on the device for a long time and is not easily detected. For example, it can collect information about users’ online behaviour, actively display fraudulent content and links, or download additional advertising to the device.

The most common viruses on Android devices.

The most commonly detected cyber risk for the Android platform is Andreed adware. Malicious advertising is mainly spread through mobile games. Adware Andreed appears most frequently in various versions of well-known games, which users most often encounter in unofficial third-party stores. Recently, security specialists have bypassed Andreed in versions of Bridge Construcotr and Tower Conquest. More aggressive adware can change the default homepage settings in a web browser or the default search engine. The adware significantly reduces the user’s comfort while working or surfing online.

Adware Hiddad appears regularly in the statistics. Most recently, it appeared in a campaign that used a version of a game similar to the popular game Minecraft to spread. In the Hiddad adware campaign, attackers are targeting the youngest users. They mainly use older versions of games that build on the success of Minecraft. Attackers always use the strategy before major holidays and vacations.

The third most common malicious code is Agent.KEQ, which appears on public Internet repositories. The main purpose of the Agent.KEQ dropper is to download other, more complex malware to the device. Agent.KEQ is a very simple malicious code that is designed to scout the device first so that attackers know what other malicious code is worth attacking it with. Agent.KEQ was hiding like this in a supposed content download application called „Your File Is Ready To Download.apk“. Of course, the app doesn’t work and its purpose is to get malicious code onto the device.

How do you know if adware is present on your device?

You can tell if adware is present on your device by the following criteria, which must be met simultaneously.

– Ads appear on your device where they shouldn’t or cover too much of the screen.

– Your browser’s default homepage or default search engine has changed without your knowledge.

– A new toolbar, add-on, or plugin is added to your browser without you consciously installing anything.

– The web browser is slower, stutters, or crashes frequently.

– Web pages you’re familiar with display differently, and pop-up ads appear.

– Links on websites redirect you to suspicious sites

The increasing use of smartphones for a range of everyday activities, from payments and identity verification to leisure activities, offers attackers a range of opportunities to target user data. A large proportion of Android smartphone users do not protect their devices with any software. Some users argue that they are careful about what they click on and what they download. But as cyber attacks and phishing campaigns continue to evolve, it’s generally harder for users to stay alert at all times. Attackers can abuse legitimate online marketing tools to spread malicious codes and ad malware, or spread fraudulent links through users’ contacts in chat apps. Modern security software protects users of all ages not only from malware, but also from potentially unwanted apps or fraudulent websites. The user can reduce the level of risk himself by, for example, not downloading games and apps outside the official store for the Android platform, Google Play.

Violet R.

Add comment