Jump to content

Trend Micro finds nearly 900,000 fake Android apps


Reefa

Recommended Posts

2014-07-16.jpg

A recent study by Japanese security software company Trend Micro has uncovered nearly 900,000 fake Android apps floating around in the wild, designed to fool users into downloading them before stealing user data and aggressively serving ads.

The company cataloged the top 50 free Android apps in the Google Play Store, and then searched the same store to see if fake versions of the same apps were present. For 77% of the apps in the top 50, at least one fake version existed on the store, cleverly disguised to look and act like the real apps but loaded with malicious code.

Even more concerning for Android users is the sheer volume of fake apps Trend Micro uncovered in a survey conducted in April. The company found 890,482 different fake apps spread throughout many app stores and online forums; more than half of the apps were malicious, 394,263 were malware, and 59,185 contained aggressive adware.

While the Google Play Store only contained a selection of these fake applications, it was still possible for people with malicious intent to infiltrate the most popular Android app store. The most common type of fake app disguised itself as antivirus software, often asking users to approve a wide set of privileges beyond what would be necessary for actual antivirus software.

Trend Micro highlighted in particular an app called 'Virus Shield', which was found on the Google Play Store with a 4.7-star rating, 10,000+ downloads and a price of $3.99. The app did absolutely nothing and was a complete scam, but it still managed to reach the top new paid apps section of the Store before Google removed it.

The report from Trend Micro comes just as Google announced Project Zero, designed to find vulnerabilities in third-party software. JD Sherry, VP of technology and solutions at Trend Micro, thought this was particularly ironic considering the prevalence of fake apps in the Play Store. She strongly suggested Google "take aim" at their own stores as part of the project.

Source

Link to comment
Share on other sites


  • Replies 11
  • Views 4.1k
  • Created
  • Last Reply

Top Posters In This Topic

  • Reefa

    5

  • AlexCross

    3

  • geeteam

    1

  • iih1

    1

nowadays, beware just download apps at your trust site. :rolleyes:

Link to comment
Share on other sites


900,000??? :unsure: this is serious. @Rok watch out!

Link to comment
Share on other sites


oh my tablet! Google playstore sends virus can't trust anything :angry:

Link to comment
Share on other sites


Hmmm!! Useing Mbam with Avast on my Andriod. Just to double-up :rolleyes:

Link to comment
Share on other sites


Even I can say that i found 1 mil of fake apps on Google Play, they need to send the list, without a list their "report" is just a scam.

Edited by AlexCross
Link to comment
Share on other sites


Even I can say that i found 1 mil of fake apps on Google Play, they need to send the list, without a list their "report" is just a scam.

And what may i ask would the so called scam achieve :think:

Link to comment
Share on other sites


Deleted..


Edited by F3dupsk1Nup
Link to comment
Share on other sites


Deleted..

Sorry it said i posted to fast and done a triple..Hence why deleted..


Edited by F3dupsk1Nup
Link to comment
Share on other sites


Even I can say that i found 1 mil of fake apps on Google Play, they need to send the list, without a list their "report" is just a scam.

And what may i ask would the so called scam achieve :think:

They are advertising their company of course, as they are selling Mobile protection as well.

Edited by AlexCross
Link to comment
Share on other sites


It's not that I don't belive it, but in all my University years as a student, when I had to research something, if one didn't present all his findings, with the most accurate level of details, nobody would even take him into consideration. In the committee's eyes, is an irelevant result. Who will correct you if they don't see the full documentation.

Everybody can make these types of studies, but few really have a documentation. There are people who spent all their lives to gather as much documentation they can to sustain their findings, and the process last years and years until a comitee aprove their research. And those researchers get away so easly posting it on the internet, with a single purpose, advertising, and expecting people to take them seriously.

Edited by AlexCross
Link to comment
Share on other sites


  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...