After safety researchers from Dr.Web contacted the tech search giant about the problem, Google relegated almost 190 applications infested with malware from the Google Play Store.
190 Infected Apps Removed from Google Play Store
Researchers had detected the malware-infected apps towards the end of April. The Russian security company reveals the apps enclosed a version of the malware recognized as Android.Click.95.
According to their investigation of the malware’s way of action, Android.Click waits for six hours after the user installs it as part of an infected app.
The malware starts its malicious behavior after six hours and by force loads a URL in the subscriber’s browser, which comprises scare ware-like messages that tell the user his system or his battery has problems.
In order to repair the problems, the user has to download another app. In the cases they’ve witnessed, Dr.Web researchers reveal that the malware readdressed users back to the Google Play Store to download these second-stage apps.
“For each download, fraudsters receive interest under the terms of affiliate advertising agreements.”
Dr.Web researchers clarified.
“It explains why Android.Click.95 is so much widespread—the cyber criminals try to make as much profit as they can from these downloads.”
Messages to download other apps come after every two minutes. The approach of frequently irritating users with badgering popups was also identified in another Android trojan, Android Banker, discovered by Avast, which was also more belligerent.
The malware was attacking users with ads and system update warnings, persuading them to malicious website where they were requested to download more apps, as measure of same associate rewards program, McAfee researchers informed.
Dr.Web researchers publicized that all the Google Play Store apps they’ve detected with Android.Click came from six different users: allnidiv, malnu3a, mulache, Lohari, Kisjhka, and PolkaPola. These were the applications that exhibited daily horoscopes, dream-books, life advice, jests, and related impractical apps.