32 malware apps are pulled by Google

Google pulled 32 malicious apps and suspended 4 associated developer accounts on 19-Apr 2013. These 32 malicious apps were distributed in different categories, like games, wallpaper, reference, and tools. The Apps were mainly in English or Russian. Large number of users were affected as the total download count for these apps reached  2 million to 9 million.

These apps were able to pass the Google's scrutiny because they did not come with malware when first downloaded. However, these apps contained a malicious advertising network library, named "BadNews", that would send out user's phone number and device id. Then it pushed a fake "Updates" notification and requested user to install an "Updates".

The additional downloaded "Updates" were malwares and promote affiliated apps. Some of apps allowed malicious behavior of sending premium rate SMS.

HKCERT recommends you uninstall the apps immediately if you have downloaded the following malicious apps. To ensure your device is not infected, you can download a mobile security app to scan the device. For the detail of Mobile Security Tools for Android, please refer to https://www.hkcert.org/mobile-security-tools/

Fig) The list of 32 "BadNews" malware apps

If you want to understand more about mobile security, please refer to Guideline of Mobile Security provided by HKCERT

Source: Lookout