Android: a new alert targeting the phones of many people

Android is once again in a very dangerous alert center targeting the phones of many people around the world, and once again we are talking about issues that can generate a huge headache for a lot of people. Specifically, Google has once again resorted to deleting some dangerous apps containing Joker malware from the Google Play Store for Android devices, which were discovered long ago and which proved to be a huge problem for people’s accounts.

Android was targeted with this issue a few months ago, but now it has come back to the attention of the whole world because in the Google Play Store apps infected with Joker malware have reappeared. At least 11 of these apps were discovered by a computer security company, which managed to discover them after they had already been installed tens of thousands of times on people’s Android phones.

Android: a new alert targeting the phones of many people

Android targets this malware because hackers use it to sign up users to expensive online services, all without people knowing what’s actually going on. The malware is also designed to intercept SMS and notifications that come in Android phones so that victims don’t know when to start withdrawing the money they pay for these expensive services and can leave people without much money.

“Despite public awareness of this particular malware, it still made its way to the official Google Apps marketplace using changes to code, implementation methods or payload recovery techniques. Unlike the previous campaign where payloads were recovered from Alibaba Cloud, in this Campaign We’ve seen joker-infected apps that download broker payload with URL shortening services like TinyURL, bit.ly, Rebrand.ly, zws.im, or 27url .cn to hide URLs for known cloud services that act as stage downloads.”

Android is being attacked by hackers this time using a different method than the previous one, so the source code is no longer distributed through Alibaba’s cloud infrastructure, but through very popular address shortcuts. This makes it difficult to detect those behind the attack that has caused so much trouble so far, but the good part is that Google has removed 11 applications that were detected with this dangerous malware.

Android does not have any protection method that Google implements against this type of malware, so users can only protect themselves from such attacks.