Skip to content

Google bans 52 Play Store apps infected by Joker, Facestealer and Coper malware

  • by
  • 2 min read

Cloud security company Zscaler’s ThreatLabz team reported 52 malicious apps on the Play Store to Google, all of which have been removed. 50 of the reported apps contained Joker, one of the most prominent malware families targeting Android devices. 

The Joker malware is a big headache for Android users. The malware usually disguises itself as a messaging app and then asks users to grant additional permissions under the premise of serving as the default SMS app. Once the required permissions are granted, the malware kicks off and starts stealing sensitive data, including SMS messages, contact lists, and device information, from the user’s phone. The malware is also known to sign its victims up for premium wireless application protocol (WAP) services.

Over the last two months, ThreatLabz researchers from Zscaler have reported the following malicious apps on the Google Play Store.

The other two apps, Vanilla Camera and Unicc QR Scanner are infected with the FaceStealer and Coper malware, respectively. FaceStealer prompts users to log in to their Facebook accounts and steals their login credentials and authentication tokens. The Coper malware can intercept and send SMSs, has a keylogger built-in, can lock an infected device and even prevent app uninstalls.

52 Infected apps banned from the Play Store

AppPackage Name
Simple Note Scannercom.wuwan.pdfscan
Universal PDF Scannercom.unpdf.scan.read.docscanuniver
Private Messengercom.recollect.linkus
Premium SMScom.premium.put.trustsms
Smart Messagescom.toukyoursms.timemessages
Text Emoji SMSmessenger.itext.emoji.mesenger
Blood Pressure Checkercom.bloodpressurechecker.tangjiang
Funny Keyboardcom.soundly.galaxykeyboard
Memory Silent Cameracom.silentmenory.timcamera
Custom Themed Keyboardcom.custom.keyboardthemes.galaxiy
Light Messagescom.lilysmspro.lighting
Themes Photo Keyboard com.themes.bgphotokeyboard
Send SMSexazth.message.send.text.sms
Themes Chat Messengercom.relish.messengers
Instant Messengercom.sbdlsms.crazymessager.mmsrec
Cool Keyboardcom.colate.gthemekeyboard
Fonts Emoji Keyboardcom.zemoji.fontskeyboard
Mini PDF Scannercom.mnscan.minipdf
Smart SMS Messagescom.sms.mms.message.ffei.free
Creative Emoji Keyboardcom.whiteemojis.creativekeyboard.ledsloard
Fancy SMScon.sms.fancy
Fonts Emoji Keyboardcom.symbol.fonts.emojikeyboards
Personal Messagecom.crown.personalmessage
Funny Emoji Messagecom.funie.messagremo
Magic Photo Editorcom.amagiczy.photo.editor
Professional Messagescom.adore.attached.message
All Photo Translatormyphotocom.allfasttranslate.transationtranslator
Chat SMScom.maskteslary.messages
Smile Emojicom.balapp.smilewall.emoji
Wow Translatorcom.imgtop.camtranslator
All Language Translatecom.exclusivez.alltranslate
Cool Messagescom.learningz.app.cool.messages
Blood Pressure Diarybloodhold.nypressure.mainheart.ratemy.mo.depulse.app.tracker.diary
Chat Text SMScom.echatsms.messageos
Hi Text SMSismos.mmsyes.message.texthitext.bobpsms
Emoji Theme Keyboardcom.gobacktheme.lovelyemojikeyboard
iMessagerstart.me.messager
Text SMScom.ptx.textsms
Camera Translatorcom.haixgoback.outsidetext.languagecameratransla
Come Messagescom.itextsms.messagecoming
Painting Photo Editorcom.painting.pointeditor.photo
Rich Theme Messagecom.getmanytimes.richsmsthememessenge
Quick Talk Messagemesages.qtsms.messenger
Advanced SMScom.fromamsms.atadvancedmmsopp
Professional Messengercom.akl.smspro.messenger
Classic Game Messengercom.classcolor.formessenger.sic
Style Messagecom.istyle.messagesty
Private Game Messagescom.message.game.india
Timestamp Cameraallready.taken.photobeauty.camera.timestamp
Social Messagecom.colorsocial.message

In the News: Fake Russian DDoS app is infecting pro-Ukraine activists

Yadullah Abidi

Yadullah Abidi

Yadullah is a Computer Science graduate who writes/edits/shoots/codes all things cybersecurity, gaming, and tech hardware. When he's not, he streams himself racing virtual cars. He's been writing and reporting on tech and cybersecurity with websites like Candid.Technology and MakeUseOf since 2018. You can contact him here: yadullahabidi@pm.me.

>