Malicious keyboard app capable of making illegal purchases

guest · Oct 31, 2019

Malicious keyboard app capable of making illegal purchases
October 31, 2019
https://www.scmagazine.com/home/sec...oard-app-capable-of-making-illegal-purchases/

A keyboard app that has been downloaded more than 40 million times has rung up millions of dollars in fraudulent charges by secretly making premium purchases on a targeted device.
The mobile security firm Upstream reported the keyboard app a.type had resided in the Google Play app store until its removal in June 2019, but it can still found in third-party Android stores and remains in use by many people unaware of its malicious nature.

An Upstream spokesperson told SC Media the keyboard’s code contains infected software development kits (SDK) with hardcoded links to ads, making it able to subscribe the device owners to premium services without their knowledge or consent. This malicious activity is not initially embedded in the SDKs, but are downloaded after the app is installed.

“These SDKs navigate to the ads via a series of redirections and automatically perform clicks to trigger the subscriptions. This is committed in the background so that normal users will not realize it is taking place,” said Dimitris Maniatis, head of Secure-D at Upstream.
To maintain its persistence, the SDK obfuscates the links used to commit fraud, and the SDK downloads additional code to further complicate detection, he said.
Click to expand...

Upstream: Trick or treating Android Emoji keyboard app makes millions of unauthorized purchases

Log in or Sign up

Malicious keyboard app capable of making illegal purchases

guest Guest

Log in or Sign up

Malicious keyboard app capable of making illegal purchases

guest Guest

Useful Searches