95 adware-infected apps have been detected on Android and iOS. More painful than really dangerous, they flood the phones with advertisements to fraudulently generate income.

earthpressnews
95 adware infected apps have been detected on Android and iOS

95 adware-infected apps have been detected on Android and iOS. More painful than really dangerous, they flood the phones with advertisements to fraudulently generate income.

We can never say it enough: be very careful about the applications you download on your smartphone or tablet! Researchers from Human Society, a company specializing in computer security, have discovered no less than 90 infected applications in the Google Play Store – which is a regular problem – but also in the App Store. As explained in a – long – blog post, these 86 Android applications and 9 iOS applications display a huge number of advertisements on the phone – sometimes without the user even realizing it – in order to generate as much revenue as possible. This is simply ad fraud. In all, they have been installed more than 13 million times worldwide!

Scylla: Ad Fraud Adware

All of these applications contain what is known as adware, which is scam software used to display advertising on the screen, most often in a web browser. The user is sometimes not even aware of this, since the billboard runs in the background of web pages. Once installed, the software changes its advertising credentials in order to deceive ad networks and impersonate a video streaming application – which is much more profitable. In addition to the ethical aspect of the thing, applications infected with adware wear down the battery, but also open the door to more dangerous malware – which, themselves, will not hesitate to steal personal and banking data. Human Society has listed all infected apps. They have since been removed from stores, but they absolutely must be uninstalled if they are already present on the smartphone.

On iOS:

  • Loot the Castle – com.loot.rcastle.fight.battle (id1602634568)
  • Run Bridge – com.run.bridge.race (id1584737005)
  • Shinning Gun – com.shinning.gun.ios (id1588037078)
  • Racing Legend 3D – com.racing.legend.like (id1589579456)
  • Rope Runner – com.rope.runner.family (id1614987707)
  • Wood Sculptor – com.wood.sculptor.cutter (id1603211466)
  • Fire-Wall – com.fire.wall.poptit (id1540542924)
  • Ninja Critical Hit – wger.ninjacriticalhit.ios (id1514055403)
  • Tony Runs – com.TonyRuns.game

On Android:

  • Roll Turn (com.roll.turn.song.wusi.pt) – 1,000,000+ downloads
  • Crush Car (com.crush.car.fly.delivery.lingjiu) – 1,000,000+ downloads
  • Super Hero-Save the world! (com.asuper.man.playmilk) – 1,000,000+ downloads
  • Spot 10 Differences (com.different.ten.spotgames) – 1,000,000 downloads
  • Dinosaur Legend (com.huluwagames.dinosaur.legend.play) – 1,000,000 downloads
  • One Line Drawing (com.one.line.drawing.stroke.yuxi) – 1,000,000 downloads
  • Shoot Master (com.shooter.master.bullet.puzzle.huahong) – 1,000,000 downloads
  • Talent Trap – NEW (com.talent.trap.stop.all) – 1,000,000 downloads
  • Find 5 Differences – New (com.find.five.subtle.differences.spot.new) – 1,000,000 downloads
  • Helicopter Attack – NEW (com.helicopter.attack.shoot.sanba) – 500,000+ downloads
  • Arrow Coins (com.helicopter.attack.shoot.sanba) – 500,000 downloads
  • Parking Master (com.ekfnv.docjfltc.parking.master) – 500,000 downloads
  • Shoot It: Using Gun (com.bullet.shoot.fight.gtommm.tom) – 500,000 downloads
  • Super Flake (com.chop.slice.flake2020) – 500,000 downloads
  • Five-Star Slice (com.five.star.slice) – 500,000 downloads
  • Sand Drawing (com.sand.drawing.newfight) – 500,000 downloads
  • Mr Dinosaur: Play your Dino (com.topggame.facego.finger.crazy.dino) – 500,000 downloads
  • Track Sliding New (com.track3d.sliding.new) – 500,000 downloads
  • Peter Shoot (com.ltc.peter.shoot.tslgame) – 100,000+ downloads
  • Thief King (com.ltcking.thief.game.tsl) – 100,000+ downloads
  • Spin: Letter Roll (come.letter.roll.race) – 100,000+ downloads
  • Relx cash (com.tycmrelx.cash) – 100,000+ downloads
  • Lady Run (com.lady.dress.run.sexylady) – 100,000 downloads
  • Magic Brush 3D (com.magic.brush.gamesly) – 100,000 downloads
  • Shake Shake Sheep (com.ldle.merge.free.coinspiggy) – 100,000 downloads
  • Number Combination: Colored Chips (com.yigegame.jyfsmnq.gg) – 100,000 downloads
  • Ztime: Earn Cash Rewards Easily (com.pocky.ztime) – 100,000 downloads
  • Lucky Wings – Lotto Scratchers (com.free.scratchers.luckywings) – 100,000 downloads
  • Shake Shake Pig (com.ldle.merge.free.coinspiggy) – 100,000 downloads
  • Lucky Money Tree (com.ldle.merge.lucky.moneytree) – 100,000 downloads
  • Run And Dance (com.tap.run.and.dance) – 100,000 downloads
  • Beat Kicker New (com.beat.kicker.two.game) – 100,000 downloads
  • Fill Color 3D (com.cube.fill.color.paint.turn.fei) – 100,000 downloads
  • Draw Live (com.draw.live.milipop) – 100,000 downloads
  • Draw 1 Stroke (com.draw.one.line.stroke.xipi) – 100,000 downloads
  • Fidget Cubes (com.fidget.cubes.feel.like) – 100,000 downloads
  • Girls Fight (com.girls.fight.fly) – 100,000 downloads
  • Ninja Assassin (com.knifeninja.assassin.dltc) – 100,000 downloads
  • Shooting Puzzle 2020 (com.my.bullet.shooting.man.hunter.youxi) – 100,000 downloads
  • Pulley Parkour (com.pul.parkour.bbroller) – 100,000 downloads
  • Chop Flake 3D (com.slice.chop.superslice3d) – 100,000 downloads
  • Weapon Fantasy (com.weapon.fantasy.games) – 100,000 downloads
  • Bike Extreme Racing (com.bike.extreme.raceing.bikegames) – 50,000+ downloads
  • Player Spiral Maker 3D (com.player.spiral.maker.d3) – 50,000+ downloads
  • Scratch Carnival (com.scratchers.jackpot.luckypiggy) – 50,000 downloads
  • Billionaire Scratch (com.free.tickets.scratchers.Billionaire) – 50,000 downloads
  • Lucky Star: Lotto Scratch (com.free.tickets.scratchers.LuckyLotto) – 50,000 downloads
  • Balloon Shooter (com.balloon.shooter.play) – 50,000 downloads
  • Musical Shoot (com.ltcmusical.fun2021) – 50,000 downloads
  • Chop Slices (com.lvdiao.chop.slices.chef) – 50,000 downloads
  • Ninja Slice (com.slice.masked.games) – 50,000 downloads
  • Work Now! (com.work.now.slack) – 50,000 downloads
  • Draw Complete (com.ltcdraw.complete.fly) – 10,000+ downloads
  • Draw a War (com.draw.war.army) – 10,000+ downloads
  • Match 3 Tiles (com.blocks.tile.matching) – Over 10,000 downloads
  • 2048 Merge Cube – Win Cash (com.cube.merge.shooter) – Over 10,000 downloads
  • Pull Worm (com.pull.bugs.worm) – 10,000 downloads
  • Shoot Dummy – Earn rewards and Paypal cash (com.shoot.dummy.fast.speed.linger) – 10,000
  • Bottle Jump (com.bottle.jump.flip.challenge.fun) – 10,000 downloads
  • Corn Scraper (com.corn.scraper.cut.pipe.siling) – 10,000 downloads
  • Idle Wood Maker (com.idle.wood.maker.gametwo) – 10,000 downloads
  • Pop Girls Schooler (com.pop.girls.schooler) – 10,000 downloads
  • Romy Rush (com.romy.rushrun) – 10,000 downloads
  • Spear Hero (com.spear.super.man.hero) – 10,000 downloads
  • Hiding Draw (com.hiding.drawltc.games) – 5000+ downloads
  • Downhill Race (com.downhill.race.redbull) – 5000+ downloads
  • Jackpot Scratcher-Win Real (com.physicswingsstudio.JackpotScratchers) – 5000 downloads
  • Dig Road Balls (com.dig.road.balls.play.games.ygygame) – 5000 downloads
  • Crowd Battle: Fight the bad guys (com.crowd.battle.goamy) – 5000 downloads
  • Design n Road (com.ltcdesign.nroad) – 1000+ downloads
  • Rescue Master (com.rescue.master.gear.mechanics.wushi) – 1000+ downloads
  • Lucky Scratchers: Lotto Card (com.lotto.bingo.lucky.scratchcard) – 1000 downloads
  • BOO Popstar (com.boostar.boo.popstar) – 1000 downloads
  • Draw Complete A (com.darwa.completea.ltca) – 1000 downloads
  • War in Painting (com.painting.war.inpaper) – 100+ downloads
  • Rush 2048: 3D Shoot Cubes (com.rushcube.puzzle.block) – 100 downloads
  • Auto Stamp Camera (com.stac.amper.qweaf) – 100+ downloads
  • Meet Camera (com.magicvcam.hdmeet.cam008) – 0 download

All of these apps are part of a massive fraud campaign called Scylla – which is still ongoing – which is itself the third wave of a larger scam operation called Poseidon that has been active since at least 2019. In 2020 already, a variant of Poseidon named Chaybdis had enhanced the deception by hiding bits of his code. Scylla is therefore an even more improved variant. Also, in order not to be fooled by this kind of application, it is important to pay attention to certain details during installation. Typically, developer accounts only feature a single app, which has very short privacy policies — and which, of course, never reveal the full scope of activities the app can perform. You should also be wary of software that is never linked to a company name or website, or that asks for permissions that it normally does not need to perform its functions.

ccn5