The Durak Card Game, developed by Pocket Games Ltd, has been downloaded from the Google Play Store around 10 million times, according to Google. After receiving numerous complaints from users, Avast security analyst Filip Chytry began investigating the app and discovered that it was designed to serve up adwareinunusual places.
The software waits for 30 days before initiating aggressive ad spam, the researcher says. This is to prevent anyone from linking the installation of the application to the specific behavior.
"Every time you unlock your device, an ad will be presented to you. It will warn you about some problem, e.g. that your device is infected, about some adult dating site or even porn. This, of course, is a lie," Chytry says in a post on the Avast blog.
"Then, it will ask you to do something. But if you agree, it will direct you to fake pages, which contain applications that attempt to send SMS messages behind your back or to applications that collect your information."
Of course, what's particularly worrying is that the app is widely used. In less than three months, it has been downloaded 10 million times. Avast claims that there are other apps, such as an IQ tester, that also serve ads.
Google has already removed the malicious app from the Play Store.
The hash algorithm (SHA256) if you encounter the application somewhere else is: BDFBF9DE49E71331FFDFD04839B2B0810802F8C8BB9BE93B5A7E370958762836 9502DFC2D14C962CF1A1A9CDF01BD56416E60DAFC088BC54C177096D033410ED FCF88C8268A7AC97BF10C323EB2828E2025FEEA13CDC6554770E7591CDED462D
Source: secnews.gr
