Video | Agriculture | Confidence | Economy | Energy | Employment | Finance | Media | Property | RBNZ | Science | SOEs | Tax | Technology | Telecoms | Tourism | Transport | Search

 

New Stealthy Ad Clicking Tactics Found in Popular Apps

Symantec recently spotted a new tactic being used by apps on the Google Play Store to stealthily perform ad-clicking on users’ devices. A developer known as Idea Master has published two popular apps on the Play Store in the past year, with a collective download count of approximately 1.5 million. Symantec has informed Google of the observed behaviour and the apps have now been removed from the Play Store.

The two apps, a notepad app (Idea Note: OCR Text Scanner, GTD, Color Notes) and a fitness app (Beauty Fitness: daily workout, best HIIT coach), are packed using legitimate packers originally developed to protect the intellectual property of Android applications. Android packers can change the entire structure and flow of an Android Package Kit (APK) file, which complicates things for security researchers who want to decipher the APK’s behavior. This also explains the developer’s ability to remain on the Play Store performing malicious acts under the radar for nearly a year before being detected.

Unlike hidden views where the view is set to transparent in order to hide content from the user, this threat actor deploys a much more cunning way of running the advertisements while keeping them hidden from the user. The app can then initiate an automated ad-clicking process that produces ad revenue.

As threat actors generate ghost clicks and ad revenue, impacted devices will suffer from drained batteries, slowed performance, and a potential increase in mobile data usage due to frequent visits to advertisement websites.

These apps went unnoticed on the Google Play Store for nearly a year, affecting roughly 1.5 million users before we uncovered their sneaky behaviour. The apps’ use of Android packers and the unusual method of hiding advertisements adds a level of complexity for security researchers.

Protection

Symantec and Norton products detect these apps as the following:

Android.MalApp
Mitigation

Since the applications are still available on Google Play, we strongly encourage users to manually uninstall them from their devices. Additionally, we advise users to take the following precautions:

• Keep your software up to date.
• Do not download apps from unfamiliar sites.
• Only install apps from trusted sources.
• Pay close attention to the permissions requested by apps.
• Install a suitable mobile security app, such as Norton or Symantec Endpoint Protection Mobile, to protect your device and data.
• Make frequent backups of important data.

You can read the full blog here.


© Scoop Media

 
 
 
Business Headlines | Sci-Tech Headlines

 

FMA: Cigna Admits Making False And Misleading Representations
Cigna Life Insurance New Zealand Limited has admitted to making false and/or misleading representations to customers in proceedings brought by the Financial Markets Authority (FMA) – Te Mana Tātai Hokohoko... More>>


Statistics: Retail Card Spending Down 0.2 Percent In July
Retail card spending fell $11 million (0.2 percent) between June 2022 and July 2022, when adjusted for seasonal effects, Stats NZ said today... More>>




Barfoot & Thompson: Auckland Rental Prices Inch Up Again, But Upward Trend Could Ease In Coming Months

Data from nearly 16,000 rental properties managed by real estate agency Barfoot & Thompson shows Auckland’s average weekly rent rose by $6.12 (or 1 percent) during the second quarter... More>>




ASB: Full Year Results: Building Resilience Today And For Our Future

In its 175th year, ASB has reported a cash net profit after tax of $1,418 million for the 12 months to 30 June 2022, an increase of $122 million or 9% on the prior year... More>>


Commerce Commission: Draft Determination On News Publishers’ Association’s Collective Bargaining Application
The Commerce Commission (Commission) has reached a preliminary view that it should allow the News Publishers’ Association of New Zealand (NPA) to collectively negotiate with Meta and Google... More>>


Heartland: Retirees Facing Pressure From Higher Cost Of Living And Increasing Debt In Retirement

Heartland has seen a significant increase in Reverse Mortgages being used to repay debt. Among the most affected by the increasing living costs are retirees, many of whom are trying to get by on NZ Super alone... More>>