These 8 malware infested android apps can affect your data; see list here

He said that a malware named Autolycos has been found to be present in at least eight Android apps which have seen more than three million downloads.

The eight malware apps that were infected included the ones which attract user attention like camera editor, keyboard themes and video editors, he said. 

In a series of tweets, he wrote,  “Found new family of malware that subscribe to premium services. 8 applications since June 2021, 2 apps always in Play Store, +3M installs. No webview like #Joker but only http requests. Let’s call it #Autolycos”

As per reports, it took Google six months to remove these 8 apps, however, but their APK versions are still available online.

“It retrieves a JSON on the C2 address: 68.183.219.190/pER/y It then executes the urls, for some steps it executes the urls on a remote browser and returns the result to include it in the requests This allows it not to have a Webview and to be more discrete,” he further wrote.

The researcher also added that these applications are widely promoted on social media through ad campaigns on Facebook and Instagram.

“To promote the applications, fraudsters create several Facebook pages and run ads on Facebook and Instagram. For example, there were 74 ad campaigns for Razer Keyboard & Theme malware,” he said in another tweet.

Here is the list of eight malware apps listed by Maxime Ingrao:

1. Vlog Star Video Editor (com.vlog.star.video.editor, 1 million downloads)

2. Creative 3D Launcher (app.launcher.creative3d, 1 million downloads)

3. Funny Camera (com.okcamera.funny, 500,000+ downloads)

4. Wow Beauty Camera (com.wowbeauty.camera, 100,000 downloads)

5. Gif Emoji Keyboard (com.gif.emoji.keyboard, 100,000 downloads)

6. Razer Keyboard & Theme (com.razer.keyboards, 10,000 downloads, not related to the gaming/tech company Razer)

7. Freeglow Camera 1.0.0 (com.glow.camera.open, 5,000 downloads)

8. Coco Camera v1.1 (com.toomore.cool.camera, 1,000 downloads)

First article