Android malware disguises as ad blocker, but then pesters users with ads

guest · Nov 15, 2019

Android malware disguises as ad blocker, but then pesters users with ads
Oh, the irony!
November 15, 2019
https://www.zdnet.com/article/andro...s-ad-blocker-but-then-pesters-users-with-ads/

Security researchers have discovered a new Android malware strain that's currently being distributed as an ad blocker for Android users, but, ironically, once installed, it pesters victims with ads through multiple methods at every couple of minutes.
Named FakeAdsBlock, this new strain has already infected at least 500 users, according to Malwarebytes, the antivirus maker who spotted the malware.

Its distribution vector is via third-party app stores, where it's available for download as an ad-blocking app named Ads Blocker, said Nathan Collier, Senior Malware Intelligence Analyst.
FAKEADSBLOCK MODUS OPERANDI
All of this starts with its installation process, where the Ads Blocker app (in which the malware is hidden) asks for permission to display content over other apps.
But the shady things continue. The app also requests access to install a VPN connection, which, again, is very odd.

"To clarify, the app doesn't actually connect to any VPN," Collier said. "Instead, by clicking OK, users actually allow the malware run in the background at all times."
Click to expand...

There are fullscreen ads, notifications spam, and websites that open out of the blue, prompting the user to enable new notifications here too.
But the novel and the most perfidious trick is the use of a home screen widget to show ads, something not seen before.

According to Collier, the FakeAdsBlock malware uses a transparent widget inside which it loads ads at regular intervals. Because the ads are shown inside a widget, they can't be dismissed unless the user removes the widget. But since the user can't see the widget on their screen, they never know the widget is there, in the first place.
Click to expand...

Malwarebytes: Stealthy new Android malware poses as ad blocker, serves up ads instead

Log in or Sign up

Android malware disguises as ad blocker, but then pesters users with ads

guest Guest

Log in or Sign up

Android malware disguises as ad blocker, but then pesters users with ads

guest Guest

Useful Searches