Google security researchers have discovered a new spywarethat has infected 24 Google Play apps. The new spyware is called “ the Joker .” As soon as the researchers discovered the affected apps, they immediately removed them.
The spyware is designed to steal information from messages (SMS), the victim's contact lists, and device information
Researcher Aleksejs Kuprins said the malware was discovered two weeks ago. So far, it has been found in 24 apps, which have had a total of over 472,000 downloads. The spyware steals data in order to feed it to advertising sites.
Joker spyware managed, through these applications, to affect users in 37 countries: Australia, Austria, Belgium, Brazil, China, Cyprus, Greece, Turkey, Egypt, France, Germany, Portugal, Spain, United Kingdom, Ghana, Honduras, India, Indonesia, Ireland, Kuwait, Malaysia, Myanmar, Netherlands, Norway, Poland, Qatar, Argentine Republic, Serbia, Ukraine, Singapore, Slovenia, Sweden, Switzerland, Thailand, United Arab Emirates and United States.
The Joker spyware controls SIM cards associated with one of the above countries. It appears to have mainly affected users from Europe and Asia.
The spyware bypasses Google Play checks and hides malicious code within advertising boxes.
Once the applications are installed, the spyware will begin secretly executing various processes to steal victims' personal information.
Furthermore, the spyware is able to automatically register victims in subscription services, through the information and codes it receives from SMS.
Unfortunately, recently we have been learning about the existence of many malicious applications in the official Google store.
In late August, researchers discovered malware in the popular CamScanner app, which was available on Google Play.
Last week, an Android was found with the open-source AhMyth RAT.
In March and February, other malicious applications were discovered, which affected thousands of users.
Researcher Kuprins emphasizes that we must be very careful when downloading an app from the Play Store and check the permissions the app requests.
Many apps ask for permission to access data that is not actually needed for function . It is best to avoid downloading such apps.
More details about Joker spyware can be seen here.
