Fraudulent Android App Appears As A Word Document

Researchers regularly rogue Android apps by posing as porn app or Flash Player, but now there's also discovered a malicious app that will let the user into believing that it is a Microsoft Word document. For example, the icon of the app resembles that of Word.

The file allows users think that matters 'data'. If the file is opened, the app asks for administrator privileges. After installation, the malware seeks to SMS messages and other information like IMEI number, SIM card number, device ID, contact information and other matters and sends it to the attacker. The malware can also send text messages and dial phone numbers specified by the attacker. The app is aimed at Chinese users and is distributed outside of Google Play.

According to security firm Zscaler, discovered that the app is not surprising that PC-based malware techniques appear in the mobile domain, since mobile devices are now ubiquitous. For Windows, there is still active malware via common icons and file names occurs as a document and try to entice users to open.

Fraudulent BatteryBotPro App From Google Play Removed

Google has removed a rogue app from Google Play posing as BatteryBotPro app and infected machines used for all kinds of fraud. The BatteryBotPro app is an app that displays detailed information about battery and battery consumption. The app, which 2.99 euros to be paid for, downloaded between 100,000 and 500,000 times.

Recently, criminals have downloaded the app and includes malicious modules, then place successfully on Google Play the custom app. Unlike legitimate app asks the rogue app administrator privileges to install. Once the user has authorized the app installed and will offer the same functionality as the legitimate app, says security firm Zscaler . In the background, the malicious app uses the device include committing click fraud and ads fraud.

This smartphone is used for displaying ads and generate false clicks on ads. In addition, the app also appears to gather information about the device and additional malicious apps to be installed without the user's permission has to give here. Next click and ad fraud app also aims to send text messages, which can cost the user money. After being informed, Google removed the app from Google Play. How many users have downloaded the rogue app is unknown.

Disguised As MP3 EXE Get Hundreds Of Clicks Per Day

Drive-by downloads and email attachments are still very popular ways to infect internet users with malware, so get daily also infected many users as they download executable files that they think are mp3s or illegal software.

It mainly involves users who search on Google for example songs. By manipulating the results cyber criminals know their pages with "tracks" to get high in the index of Google and so these users to lure to their website. The songs offered themselves as MP3 files, but in reality .exe files. However, Windows displays the default file extension is not. Once the files may contain malware or potentially unwanted software downloads, warns security company Blue Coat .

Software piracy

Security firm Zscaler recently paid attention even to the same strategy for infecting Internet users, only through so-called illegal software. Again it goes to sites offering exe files that occur for example as popular games, software and drivers. In reality, it is adware / spyware named OutBrowse and Multiplug. The programs collect information about the user and send them back and show unsolicited ads.

According to analyst Chris Mannon the problem lies mainly with the awareness of Internet users "Users know reliable download sites for software such as Flash Player or Skype, but as they search for pirated software and media, any link that promises results suddenly familiar." Mannon also advises users to content that is obtained illegally not to be trusted. "Users make bad decisions if they think the desired content can be obtained free of charge. We recommend downloading illegal content occasionally advise to pay just for the desired media."