Related Posts Plugin for WordPress, Blogger...
Powered by Blogger.

Google pulls three catlike adware-filled apps from Play store

Posted by Jerry Hannan Sunday, February 8, 2015
Google pulls three catlike adware-filled apps from Play store
Description: Google has abeyant three Android apps from its Play abundance that were blame exceptionable apps to millions of users.

Google has pulled bottomward three apps from its Play app abundance that were blame exceptionable ads to Android users, but alone afterwards they were installed by millions.

The three apps were appear to Google bygone by aegis close Avast, which apparent the apps had sneaked accomplished Google's Play abundance checks admitting acutely apprehensive behaviour.

One of the three gadgets , a agenda bold aimed at English-language users alleged Durak, had been installed amid bristles actor and 10 actor times back December aftermost year, according to Google's stats Pakistan. The added two apps targeted Russian-speaking users, including an IQ analysis app and a Russian history app.


As one victim accent in a video acquaint in January, already a accessory woke up, the awful app began announcement arrangement notification-style letters that apprenticed the user to 'click ok' to fix up non-existent problems, such as a apathetic internet connection. Already the user has hit 'OK', the app again redirected them to added gadgets in Pakistan on Google Play, in some cases to accepted aegis apps.

Avast adaptable malware analyst Filip Chytry acclaimed that in some cases the apps additionally attack to nudge users to third-party app stores.

Durak, in particular, may accept been able to arbor up millions of installs because it initially functions as a accustomed gaming app.

"This consequence charcoal until you reboot your accessory and delay for a brace of days. Afterwards a week, you ability alpha to feel there is article amiss with your device. Some of the apps delay up to 30 canicule until they appearance their accurate colors," said Chytry.

"After 30 days, I assumption not abounding bodies would apperceive which app is causing aberrant behaviour on their phone, right?"

That's the absolute claiming for users if they've installed these apps: it's difficult to acquaint which app on a accessory is triggering the affected ads and accordingly adamantine to say which one should be removed. The letters will abide to affectation alike if a absolute aegis artefact is installed.

Avast appear the doubtable apps to Google bygone and as of Wednesday the three apps had been removed for the Play store. Users on Avast forums, however, claimed to accept appear the apps to Google in backward January.


Adware apps like these actualization on Google Play are not acceptable account for Google, which has anchored up its developer behavior over the accomplished few years to anticipate scams.

Besides an absolute ban on virus, worms, and trojans, Google's developer agreeable action outlaws advertisements through system-level notifications unless it's an basic affection of an app.

In this case, the awful ads were actuality served by three accepted third-party ad networks. The instructions for announcement ads - and for the gadgets in Pakistan to delay for weeks afore accomplishing so - are independent in an Android amalgamation book (APK) in the announcement software developer kit (SDK).

An Avast appointment user credibility out the "APK book contains config book for 'mobi.dash' ad sdk. It is alleged 'ads_settings.json' and it is stored beneath 'res\raw' folder. It configures how continued app should delay afore assuming ads (e. g. 'overappStartDelaySeconds' property, in this accurate case it has 86400 value, which agency one day, 24 hours * 60 account * 60 seconds).

"Also APK book contains awful cipher central amalgamation 'mobi.dash.*'. For archetype there is chic alleged 'mobi.dash.homepage.AdsHomepageUtils' which can change browser homepage and 'mobi.dash.shortcuts.AdsShortcutUtils' which creates launcher shortcuts back command server sends adapted message."

Google pulls three catlike adware-filled apps from Play store
Description: Google has abeyant three Android apps from its Play abundance that were blame exceptionable apps to millions of users.

Google has pulled bottomward three apps from its Play app abundance that were blame exceptionable ads to Android users, but alone afterwards they were installed by millions.

The three apps were appear to Google bygone by aegis close Avast, which apparent the apps had sneaked accomplished Google's Play abundance checks admitting acutely apprehensive behaviour.

One of the three gadgets , a agenda bold aimed at English-language users alleged Durak, had been installed amid bristles actor and 10 actor times back December aftermost year, according to Google's stats Pakistan. The added two apps targeted Russian-speaking users, including an IQ analysis app and a Russian history app.


As one victim accent in a video acquaint in January, already a accessory woke up, the awful app began announcement arrangement notification-style letters that apprenticed the user to 'click ok' to fix up non-existent problems, such as a apathetic internet connection. Already the user has hit 'OK', the app again redirected them to added gadgets in Pakistan on Google Play, in some cases to accepted aegis apps.

Avast adaptable malware analyst Filip Chytry acclaimed that in some cases the apps additionally attack to nudge users to third-party app stores.

Durak, in particular, may accept been able to arbor up millions of installs because it initially functions as a accustomed gaming app.

"This consequence charcoal until you reboot your accessory and delay for a brace of days. Afterwards a week, you ability alpha to feel there is article amiss with your device. Some of the apps delay up to 30 canicule until they appearance their accurate colors," said Chytry.

"After 30 days, I assumption not abounding bodies would apperceive which app is causing aberrant behaviour on their phone, right?"

That's the absolute claiming for users if they've installed these apps: it's difficult to acquaint which app on a accessory is triggering the affected ads and accordingly adamantine to say which one should be removed. The letters will abide to affectation alike if a absolute aegis artefact is installed.

Avast appear the doubtable apps to Google bygone and as of Wednesday the three apps had been removed for the Play store. Users on Avast forums, however, claimed to accept appear the apps to Google in backward January.


Adware apps like these actualization on Google Play are not acceptable account for Google, which has anchored up its developer behavior over the accomplished few years to anticipate scams.

Besides an absolute ban on virus, worms, and trojans, Google's developer agreeable action outlaws advertisements through system-level notifications unless it's an basic affection of an app.

In this case, the awful ads were actuality served by three accepted third-party ad networks. The instructions for announcement ads - and for the gadgets in Pakistan to delay for weeks afore accomplishing so - are independent in an Android amalgamation book (APK) in the announcement software developer kit (SDK).

An Avast appointment user credibility out the "APK book contains config book for 'mobi.dash' ad sdk. It is alleged 'ads_settings.json' and it is stored beneath 'res\raw' folder. It configures how continued app should delay afore assuming ads (e. g. 'overappStartDelaySeconds' property, in this accurate case it has 86400 value, which agency one day, 24 hours * 60 account * 60 seconds).

"Also APK book contains awful cipher central amalgamation 'mobi.dash.*'. For archetype there is chic alleged 'mobi.dash.homepage.AdsHomepageUtils' which can change browser homepage and 'mobi.dash.shortcuts.AdsShortcutUtils' which creates launcher shortcuts back command server sends adapted message."

0 comments