Cloud security company Zscaler’s ThreatLabz team reported 52 malicious apps on the Play Store to Google, all of which have been removed. 50 of the reported apps contained Joker, one of the most prominent malware families targeting Android devices.
The Joker malware is a big headache for Android users. The malware usually disguises itself as a messaging app and then asks users to grant additional permissions under the premise of serving as the default SMS app. Once the required permissions are granted, the malware kicks off and starts stealing sensitive data, including SMS messages, contact lists, and device information, from the user’s phone. The malware is also known to sign its victims up for premium wireless application protocol (WAP) services.
Over the last two months, ThreatLabz researchers from Zscaler have reported the following malicious apps on the Google Play Store.
The other two apps, Vanilla Camera and Unicc QR Scanner are infected with the FaceStealer and Coper malware, respectively. FaceStealer prompts users to log in to their Facebook accounts and steals their login credentials and authentication tokens. The Coper malware can intercept and send SMSs, has a keylogger built-in, can lock an infected device and even prevent app uninstalls.
52 Infected apps banned from the Play Store
App | Package Name |
---|---|
Simple Note Scanner | com.wuwan.pdfscan |
Universal PDF Scanner | com.unpdf.scan.read.docscanuniver |
Private Messenger | com.recollect.linkus |
Premium SMS | com.premium.put.trustsms |
Smart Messages | com.toukyoursms.timemessages |
Text Emoji SMS | messenger.itext.emoji.mesenger |
Blood Pressure Checker | com.bloodpressurechecker.tangjiang |
Funny Keyboard | com.soundly.galaxykeyboard |
Memory Silent Camera | com.silentmenory.timcamera |
Custom Themed Keyboard | com.custom.keyboardthemes.galaxiy |
Light Messages | com.lilysmspro.lighting |
Themes Photo Keyboard | com.themes.bgphotokeyboard |
Send SMS | exazth.message.send.text.sms |
Themes Chat Messenger | com.relish.messengers |
Instant Messenger | com.sbdlsms.crazymessager.mmsrec |
Cool Keyboard | com.colate.gthemekeyboard |
Fonts Emoji Keyboard | com.zemoji.fontskeyboard |
Mini PDF Scanner | com.mnscan.minipdf |
Smart SMS Messages | com.sms.mms.message.ffei.free |
Creative Emoji Keyboard | com.whiteemojis.creativekeyboard.ledsloard |
Fancy SMS | con.sms.fancy |
Fonts Emoji Keyboard | com.symbol.fonts.emojikeyboards |
Personal Message | com.crown.personalmessage |
Funny Emoji Message | com.funie.messagremo |
Magic Photo Editor | com.amagiczy.photo.editor |
Professional Messages | com.adore.attached.message |
All Photo Translator | myphotocom.allfasttranslate.transationtranslator |
Chat SMS | com.maskteslary.messages |
Smile Emoji | com.balapp.smilewall.emoji |
Wow Translator | com.imgtop.camtranslator |
All Language Translate | com.exclusivez.alltranslate |
Cool Messages | com.learningz.app.cool.messages |
Blood Pressure Diary | bloodhold.nypressure.mainheart.ratemy.mo.depulse.app.tracker.diary |
Chat Text SMS | com.echatsms.messageos |
Hi Text SMS | ismos.mmsyes.message.texthitext.bobpsms |
Emoji Theme Keyboard | com.gobacktheme.lovelyemojikeyboard |
iMessager | start.me.messager |
Text SMS | com.ptx.textsms |
Camera Translator | com.haixgoback.outsidetext.languagecameratransla |
Come Messages | com.itextsms.messagecoming |
Painting Photo Editor | com.painting.pointeditor.photo |
Rich Theme Message | com.getmanytimes.richsmsthememessenge |
Quick Talk Message | mesages.qtsms.messenger |
Advanced SMS | com.fromamsms.atadvancedmmsopp |
Professional Messenger | com.akl.smspro.messenger |
Classic Game Messenger | com.classcolor.formessenger.sic |
Style Message | com.istyle.messagesty |
Private Game Messages | com.message.game.india |
Timestamp Camera | allready.taken.photobeauty.camera.timestamp |
Social Message | com.colorsocial.message |
In the News: Fake Russian DDoS app is infecting pro-Ukraine activists