Google has removed dozens of popular fake photo apps meant to hurt its users.
Security firm Trend Microdiscovered 29 malicious apps that were listed on Polandthe official Google Play store, all advertised as “beauty camera” applications. The apps have since been removed by Google.
The photo apps carried out a number of nefarious activities on Android devices which they were installed to. Some of the apps would load up a full-screen advertisement for fraudulent or pornographic content every time a user unlocked the device. Other apps in the batch would forward users to phishing websites that tried to steal their personal information. Sometimes attempts to steal users email or phone number were hidden under the guise of claiming a prize.
Trend Micro points out that even technically legal content, such as pornography, promoted by these apps were a scam. In their investigation, the security analysts paid for an adult video player pushed by the apps, which did not play any content.
Another batch of beauty apps went even further. Trend Micro discovered that a few of these photo filter apps that promised to “beautify” users’ pictures were actually stealing the photos. The app would upload a user’s photo to a private server. Instead of providing a filtered version of the pic in return, the app would display a picture with a fake message telling them they need to update the app. Trend Micro believes these stolen photos are used for other malicious activities, such as social media photos on fake accounts.
SEE ALSO: 'Fortnite' vulnerability put millions of accounts at riskThese apps were made to be incredibly difficult to catch. The developers behind them used compression archives, also known as “packers,” which basically make them hard to analyze. In addition, there’s no indication to a user that these apps were responsible for the pop-ups being shown on their Android phone. If a user were to attempt to uninstall applications in order to find the culprit, they would come across a problem there too. These fake beauty apps were hidden from a user’s application list.
In total, the 29 malicious apps were downloaded more than 4 million times. Three of the apps alone accounted for more than 3 million of the downloads.
This is far from the first time that malicious Android apps found their way to the Google Play store. While these apps have since been removed, the sheer number of downloads proves that Google simply isn’t moving fast enough to shut them down.
Topics Android Cybersecurity Google
SpaceX and TMuseums are sending each other their best duck pics on TwitterThe 3 best TV streaming devices to get right nowWho's behind the egg that broke the Instagram world record?Trump defends his choice to serve the Clemson football team '1000 hamberders'Miley Cyrus wishes Liam Hemsworth a happy birthday all over social media and it's the sweetestThis flaming cocktail belongs in 'Harry Potter'Miley Cyrus wishes Liam Hemsworth a happy birthday all over social media and it's the sweetestTrump blatantly lies about being in the White House, confuses everyoneNews helicopter catches out people playing 'Mario Kart' on stadium's big screenThe 'Killing Eve' moment at the Golden Globes that you may have missedTrump’s fast food spread at the White House has the internet talkingMiley Cyrus wishes Liam Hemsworth a happy birthday all over social media and it's the sweetestTrump's Truth Social app has not been approved by Google's Play store yetCanadian air traffic controllers send pizza to U.S. colleagues working without payWhat is revenge travel and why is everyone talking about it?Trump defends his choice to serve the Clemson football team '1000 hamberders'Warner Bros. is holding secret screenings of 'Batgirl'Magical pooch performs tricks to 'Harry Potter' spells, deserves 10 points for GryffindorHow to create a QR codes for Instagram posts Tesla lawsuits allege racial and anti Nivea's controversial skin J.K. Rowling tweets the perfect advice for a new 'Harry Potter' reader Bille Lourd posts a touching tribute on Carrie Fisher's birthday Lupita Nyong'o reveals that Harvey Weinstein harassed her, too 'Outlander' recap: Claire and Jaime reunite and have sex New 'Doctor Who' casting is announced and it looks like total squad goals This video Q&A with Louis Theroux is both revealing and hilarious Man sues airline for not serving authentic Champagne Horror stories from Weinstein's employees reveal a much larger problem in Hollywood Footage of Harry Styles being groped at concert sparks Twitter movement Nintendo Switch gives users 2 big new features in update Thong jeans exist now and wasn't that one of the signs of the apocalypse? Someone brought this macaroni and cheese to a potluck and thought, 'This is good' The next tech bubble will last weeks, not years, and it will be insane Look up to see Uranus this week Google led a $1 billion investment in Lyft, here's why that matters Taylor Swift just dropped a new song and it's 'Gorgeous' Experts don't know if fake news is going to get more or less awful Bill Gates hopes $1.7 billion investment will improve public schools