Malicious Android apps use coronavirus to hack user devices


The number of coronavirus-related apps on the Google Play Store has increased significantly over the past few weeks as both legitimate developers and cybercriminals look to cash in on users’ fears surrounding the virus.
By analyzing Android telemetry data, security researchers at Bitdefender have observed a huge spike in applications which contain either the worlds ‘covid’ or ‘corona’ and in total, the firm identified 579 apps that contained coronavirus-related keywords in their manifest.
According to Bitdefender, 560 of these apps were legitimate and provided users with news about the coronavirus, information on how to avoid infection and medical booking services. However, many of these apps actually had nothing to do with the coronavirus at all, while others contained adware or were bundled with malware.
Once the coronavirus was declared a pandemic by the WHO, Google began adjusting the Google Play Store’s search algorithms in order to filter or remove illegitimate coronavirus apps.
However, when Bitdefender published its report on the matter, 22 apps using the ‘coronavirus’ keyword were still available on the Google Play Store and listed under the ‘Health and Fitness’ and ‘Medical’ categories. While many of these apps are legitimate, 280 others were removed from the store, including many regional or global coronavirus tracking apps.
Coronavirus apps
By examining coronavirus apps on third-party marketplaces, Bitdefender found that many of them were malicious and were exploiting people’s fears of the virus to install adware and malware on users’ Android devices.
One such example is an app that imitates a coronavirus information site to spread the Anubis banking Trojan. Once a user installs the app and gives it access to their device, it then requests a number of other permissions and accepts them by itself. The app takes users to a coronavirus statistics website to throw them off its track and hides its icon, while it continues its work in the background.
The Iranian coronavirus app AC19 was another example Bitdefender discovered that is actually a piece of spyware. The sample discovered by the firm asks for permissions to scan for the coronavirus but in reality, the app is asking for sensitive Android app privileges to continue its malicious activities.
An app called Coronavirus Tracker was also found to dispense adware to its victims. When first started, the app says that it is unavailable in a user’s country and then hides itself. However, it then bombards users with unwanted ads. Bitdefender’s researchers even found that the Joker malware was being distributed by a game called iFun.
Senior e-threat analyst at Bitdefender, Liviu Arsene warned in his report that users need to be extra careful when installing new apps during this difficult time, saying:
“The Coronavirus pandemic might have everyone running around after information, searching for applications that offer live monitoring or even medical appointments to get tested. It’s always recommended that you install only official apps from official marketplaces, and seek information only from official sources. Also, it’s crucial to make sure you have a mobile security solution that can keep you and your device safe from malware and other online threats.”
Via ComputerWeekly
The number of coronavirus-related apps on the Google Play Store has increased significantly over the past few weeks as both legitimate developers and cybercriminals look to cash in on users’ fears surrounding the virus. By analyzing Android telemetry data, security researchers at Bitdefender have observed a huge spike in applications…
Recent Posts
- Check your DVDs for disc rot — Warner Bros. says it’s replacing them
- Sure, noise-cancelling headphones are great for work but they saved my sleep (and sanity) and several vacations too – here’s how
- Alibaba doubles down on RISC-V architecture with a new secretive ‘server-grade’ chip that will put AMD and Intel on alert
- It’s a great moment for classic RPGs
- How to Clean Vinyl Records (2025): Vacuums, Solution, Wipes
Archives
- March 2025
- February 2025
- January 2025
- December 2024
- November 2024
- October 2024
- September 2024
- August 2024
- July 2024
- June 2024
- May 2024
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- November 2020
- October 2020
- September 2020
- August 2020
- July 2020
- June 2020
- May 2020
- April 2020
- March 2020
- February 2020
- January 2020
- December 2019
- November 2019
- September 2018
- October 2017
- December 2011
- August 2010