{"id":86719,"date":"2018-08-27T19:13:48","date_gmt":"2018-08-27T13:43:48","guid":{"rendered":"https:\/\/blogs_admin.quickheal.com\/?p=86719"},"modified":"2018-08-27T19:39:04","modified_gmt":"2018-08-27T14:09:04","slug":"aware-hiddad-malware-present-google-play-store","status":"publish","type":"post","link":"https:\/\/www.quickheal.com\/blogs\/aware-hiddad-malware-present-google-play-store\/","title":{"rendered":"Be aware! Hiddad Malware present on Google Play Store."},"content":{"rendered":"

Quick Heal Security Lab has spotted a couple of applications on play store which hide themselves after installation and display full screen ads after specific time interval. This trend is used by most of the developers these days to earn profit by displaying ads.<\/span><\/p>\n

Even if users want to uninstall these applications, they won’t be able to find in the app manager as it was installed with the name ‘Google Play Service, Google Play Store’ and uses icon of genuine apps such as Google Play Store, default Android icon or YouTube. <\/span><\/p>\n

After hiding itself, it interrupts user by frequently showing advertisements while using other applications. This type of malwares are present on Google Play store with more than 50k+ downloads. Quick Heal Security Lab reported this to Google and those applications have been removed from Play store now.<\/span><\/p>\n

\"\"<\/p>\n

Fig. 1 List of application present on Play Store.<\/span><\/p>\n

How to Uninstall?<\/b><\/span><\/p>\n

Follow the below steps to uninstall such applications:<\/span><\/p>\n

1. Go to app manager in Setting<\/span><\/p>\n

\"\"<\/p>\n

Fig.2 Fake Google Play Store in App Manager<\/span><\/p>\n

2. Find out fake Google Play Store as shown below<\/span><\/p>\n

\"\"<\/p>\n

Fig. 3 Uninstallation of fake google play store<\/span><\/p>\n

If you still find it confusing, then there is a better way to uninstall such malware, using Antivirus. Antivirus detects malware and prompts to uninstall, and asks for uninstallation of such apps.<\/span><\/p>\n

Here is the list of malicious package name with MD5 removed from Play store :<\/span><\/p>\n\n\n\n<\/colgroup>\n\n\n\n\n\n\n\n\n\n\n
\n

Package Name<\/span><\/p>\n<\/td>\n

\n

MD5<\/span><\/p>\n<\/td>\n<\/tr>\n

\n

com.call.free.pixel.art.pro.go<\/span><\/p>\n<\/td>\n

\n

c30984890d94f6571d71445fae7b0070<\/span><\/p>\n<\/td>\n<\/tr>\n

\n

com.coloringkids.color<\/span><\/p>\n<\/td>\n

\n

4f6937b42d01e247480bf12598333639<\/span><\/p>\n<\/td>\n<\/tr>\n

\n

com.draw_dresses.dawsigdraw<\/span><\/p>\n<\/td>\n

\n

b8865e339190ca608a60d47a49d9eeab<\/span><\/p>\n<\/td>\n<\/tr>\n

\n

com.horror.game.scary.momo.freecall.<\/span><\/p>\n

horror.clown.grandpa<\/span><\/p>\n<\/td>\n

\n

df48af1e778d962990cd2a4be3660f9f<\/span><\/p>\n<\/td>\n<\/tr>\n

\n

com.lovesms.messageslove<\/span><\/p>\n<\/td>\n

\n

281eb6d8eee11b5c049cb4785fc27f02<\/span><\/p>\n<\/td>\n<\/tr>\n

\n

com.pixel.art.coloring.book.free.unicorn.<\/span><\/p>\n

color.by.number<\/span><\/p>\n<\/td>\n

\n

2dcca52562f96a1f4f57b0c634383b48<\/span><\/p>\n<\/td>\n<\/tr>\n

\n

com.startmyapp.mynew.app.free<\/span><\/p>\n<\/td>\n

\n

fe0a52e4cee084c518c74f9630e8b778<\/span><\/p>\n<\/td>\n<\/tr>\n

\n

fr.healthandfitness.news<\/span><\/p>\n<\/td>\n

\n

Fe343939daf702f0fd4c8767d23b2480<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Quick Heal Detection<\/b><\/span><\/p>\n

Quick Heal successfully detect these malware under variants of Android.Hiddad.A<\/span><\/p>\n

How to stay safe from fake mobile apps<\/strong><\/span><\/p>\n

1. Check an app\u2019s description before you download it.<\/span><\/p>\n

2. Check the app developer\u2019s name and their website. If the name sounds strange or odd, you have reasons to suspect it.<\/span><\/p>\n

3. Go through the reviews and ratings of the app. But, note that these can be faked too.<\/span><\/p>\n

4. Avoid downloading apps from third-party app stores.<\/span><\/p>\n

5. Use a reliable mobile antivirus that can prevent fake and malicious apps from getting installed on your phone.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Quick Heal Security Lab has spotted a couple of applications on play store which hide themselves after installation and display full screen ads after specific time interval. This trend is used by most of the developers these days to earn profit by displaying ads. Even if users want to uninstall these applications, they won’t be […]<\/p>\n","protected":false},"author":48,"featured_media":86733,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[965,55],"tags":[244,380],"class_list":["post-86719","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-adware","category-android","tag-adware","tag-android-malware"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/86719"}],"collection":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/users\/48"}],"replies":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/comments?post=86719"}],"version-history":[{"count":9,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/86719\/revisions"}],"predecessor-version":[{"id":86734,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/86719\/revisions\/86734"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/media\/86733"}],"wp:attachment":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/media?parent=86719"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/categories?post=86719"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/tags?post=86719"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}