Malicious Apps Brought Ad-Clicking 'Judy' Malware To Millions Of Android Phones (fortune.com)

An anonymous reader quotes Fortune: The security firm Checkpoint on Thursday uncovered dozens of Android applications that infected users' devices with malicious ad-click software. In at least one case, an app bearing the malware was available through the Google Play app store for more than a year. While the actual extent of the malicious code's spread is unknown, Checkpoint says it may have reached as many as 36.5 million users, making it potentially the most widely-spread malware yet found on Google Play... The nefarious nature of the programs went unnoticed in large part, according to Checkpoint, because its malware payload was downloaded from a non-Google server after the programs were installed. The code would then use the infected phone to click on Google ads, generating fraudulent revenue for the attacker.

Comments

Android malware is profitable for Google and mfrs.

[Futurepower(R)]

Android malware causes Google and Android phone manufacturers and phone service providers to make more money. Most people don't have the time or technical ability to deal with issues, so they buy new phones.

Google arranged that Android cannot reliably be updated to its latest version. That pro-malware destructiveness is profitable.

Google needs better management. The company is rapidly getting a bad reputation, partly also because of tracking internet users. Why should Google know if I visit my bank account?

My opinions.

Re:Android malware is profitable for Google and mf

[Jamu]

Google provides the updates/patches for *everyone*

Google updated my Nexus 7 for about 18 months. They stopped at the end of 2015.

What's a malicious phone app?

[Frosty Piss]

Odd, I've never had these sorts of problems. My phone is an iPhone 5s...

Re:What's a malicious phone app?

[mnemotronic]

I've never had these sorts of problems. My phone is an iPhone 5s.

Sorry; dumb question: How do you know you've never had this problem? Maybe you have and just have not been aware of it.

Re:Android malware is profitable for Google and mf

[The MAZZTer]

You do realize Google recently updated its Play Store developer EULA to ban apps that download and run binaries from non-Google Play Store locations, right? That will seal this hole. Sounds like Google is cracking down to me.

Re:Android malware is profitable for Google and mf

[stephanruby]

The app faked ad impressions and ad clicks. This is a flaw with their advertisement system, not with device security.

As a user, I only care that the apps I install do not take too much energy, do not take too many background CPU cycles, and do not take too much bandwidth. Aside from those three things, wich I can already monitor with Android, I couldn't care less if my apps fake ad clicks. If you ask me, the more fake data and the more fake ad clicks there are, the better it is for society as a whole.

Bad marketing for Google

[Futurepower(R)]

"It is then the carriers responsibility to get that sorted out..."

The problem for Google is that abuse by the carriers damages Google's reputation. Most people don't understand all the issues.

Companies should have enough control over their products that they can prevent their products from being used as an instrument of abuse by other companies.

Re:meanwhile iPhone users...

[tsa]

Every time I read about yet another Android malware I am reminded why I bought an iPhone. They're worth the price.