Skip to content

Malicious Google play app problem infects 1.7 million more devices

the company’s official repository for Android apps, has once again been caught hosting fraudulent and potentially malicious apps, with the discovery of more than 56 apps—many of them for children—that were installed on almost 1.7 million devices.

Tekya is a family of malware that generates fraudulent clicks on ads and banners delivered by agencies including Google’s AdMob, AppLovin’, Facebook, and Unity. To give the clicks the air of authenticity, the well-obfuscated code causes infected devices to use Android’s “MotionEvent” mechanism to imitate legitimate user actions. At the time that researchers from security firm Check Point discovered them, the apps went undetected by VirusTotal and Google Play Protect. Twenty-four of the apps that contained Tekya were marketed to children. Google removed all 56 of the apps after Check Point reported them.

The list of infected kids’ games is here:

caracal.raceinspace.astronaut
com.caracal.cooking
com.leo.letmego
com.pantanal.aquawar
com.pantanal.dressup
banz.stickman.runner.parkour
com.banzinc.littiefarm
com.folding.blocks.origami.mandala
com.goldencat.hillracing
com.hexa.puzzle.hexadom
com.ichinyan.fashion
com.maijor.cookingstar
com.major.zombie
com.nyanrev.carstiny
com.pantanal.stickman.warrior
com.splashio.mvm
leo.unblockcar.puzzle
biaz.jewel.block.puzzle2019
biaz.magic.cuble.blast.puzzle
com.inunyan.breaktower
com.leo.spaceship
fortuneteller.tarotreading.horo
ket.titan.block.flip
com.leopardus.happycooking
com.caracal.burningman
com.cuvier.amazingkitchen

And the list of infected utility apps is here:

com.caculator.biscuitent
inferno.me.translator
translate.travel.map
travel.withu.translate
allday.a24h.translate
best.translate.tool
com.bestcalculate.multifunction
com.mimochicho.fastdownloader
com.pdfreader.biscuit
com.yeyey.translate
mcmc.delicious.recipes
mcmc.delicious.recipes
multi.translate.threeinone
pro.infi.translator
rapid.snap.translate
smart.language.translate
sundaclouded.best.translate
biscuitent.imgdownloader
biscuitent.instant.translate
com.besttranslate.biscuit
com.michimocho.video.downloader
mcmc.ebook.reader
swift.jungle.translate
com.mcmccalculator.free
com.tapsmore.challenge
com.yummily.healthy.recipes
com.hexamaster.anim
com.twmedia.downloader
bis.wego.translate
com.arplanner.sketchplan
com.arsketch.quickplan
com.livetranslate.best
com.lulquid.calculatepro
com.smart.tools.pro
com.titanyan.igsaver
hvt.ros.digiv.weather.radar
md.titan.translator
scanner.ar.measure
toolbox.artech.helpful

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: