New Malware Family “Venus” In Google Play Store Infects 285,000 Android Users

guest · Dec 12, 2019

New Malware Family “Venus” In Google Play Store Infects 285,000 Android Users to Subscribe Premium Ads
December 12, 2019
https://gbhackers.com/venus-google-play/

Researchers discovered a new Trojan family called “Venus” resides in the Google play store infected at least 285,000 Android users around the world.
There are 8 apps involved with the malicious activities in Android user’s device and it is mainly targeting the carrier billing and advertising area.
Malware Infection Process via Malicious App
Researchers observed that most of the data consumed by an application called “Quick scanner” which is protected by a library that encrypts and hides files.

Further deep analysis revealed that the apps have fraudulent code in compiled Android file and it processes the anti-reverse check after the file was imported and decrypted in memory in order to bypass Google’s detection.

“Venus is waiting for the right time to attack. The malware is able to register time after the application has been downloaded instead of being launched on the very first day.” Evina said.
Click to expand...

With running an application, the URL simply loaded into the browser without letting users know whats going on and it subscribes to the premium ads, at the end attackers can make its profit from advertisements clicks and premium services subscriptions.
Click to expand...

Evina: Evina Security analyssts found a new Trojan Family on Google Play

Log in or Sign up

New Malware Family “Venus” In Google Play Store Infects 285,000 Android Users

guest Guest

Log in or Sign up

New Malware Family “Venus” In Google Play Store Infects 285,000 Android Users

guest Guest

Useful Searches