The malware then carries out the following nefarious activities:<\/p>\n Detailed analysis of the malware<\/strong> <\/p>\n Once the victim is guided to the fake market he can browse freely and find around 50 popular apps that can be downloaded. <\/p>\n Once the victim has picked the app of his choice (Adobe Flash Player in this example) he is shown a page of authentic permissions. Once the app has been installed, two rather strange looking icons are added to the home screen. <\/p>\n After installation, the corrupted app sends the following messages to the premium numbers mentioned:<\/p>\n The cloned apps that can be found are some of the most commonly used apps. There are about 50 such apps that have been successfully cloned by this malware and this creates a lot of confusion for potential victims. Here is a list of some of these apps: <\/p>\n Tips for safety<\/strong><\/p>\n There are many more apps that have been successfully cloned and used to trick victims. In order to ensure safety we recommend the following steps: <\/p>\n The popularity of Android devices and their ability to install apps from third-party sources is a major risk for one and all. Innovative techniques like this will crop up from time to time, but the best security software and awareness will keep users protected. <\/p>\n Thanks to Sandip for the analysis.<\/p>\n","protected":false},"excerpt":{"rendered":" Our malware analysis team has discovered a new social engineering trick used by criminals to target Android users. The attack vector guides the victim to a fake application market (or an untrustworthy third-party source). Once there, the victim downloads clones of popular apps that are cleverly disguised. Once such an application gets downloaded, it controls […]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[70,55,24,60],"tags":[56,57,49,59,121,61,29,67],"class_list":["post-74578","post","type-post","status-publish","format-standard","hentry","category-adobe","category-android","category-malware","category-smartphone","tag-android-security","tag-droid-defense","tag-malware","tag-mobile-devices","tag-sideloading","tag-smartphone-security","tag-social-engineering","tag-third-party-apps"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/74578"}],"collection":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/comments?post=74578"}],"version-history":[{"count":0,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/74578\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/media?parent=74578"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/categories?post=74578"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/tags?post=74578"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"Fake](\"https:\/\/blogs.quickheal.com\/wp-content\/uploads\/2012\/07\/12334567811242.jpg\" "\\"Fake")
<\/a><\/p>\n\n
<\/a><\/a><\/p>\n<\/a><\/a><\/p>\n\n
\nMessage text \u2013 68295857151001760382<\/li>\n
\nMessage text \u2013 68488857151001794922<\/li>\n
\nMessage text \u2013 68139857131001729632<\/li>\n
\nMessage text \u2013 70123384141921689572<\/li>\n<\/ul>\n\n
\n