Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Thursday February 05 2015, @05:02AM   Printer-friendly
from the costly-freeware dept.

BBC reports that Android users are being warned that several popular apps that were on the official Google Play store appear to contain hidden code that made malicious ads pop up with one of the apps — a free version of the card game Durak — downloaded up to 10 million times, according to Google Play's own counter.

The "adware" causes spurious pop-up messages to appear that had been made to look like system notifications that say the phone is running "slow" and that the user needs to install new software to fix the problem. "You get re-directed to harmful threats on fake pages," writes Avast malware analyst Filip Chytry, "like dubious app stores and apps that attempt to send premium SMS behind your back or to apps that simply collect too much of your data for comfort while offering you no additional value."

Several people who had downloaded the Durak card game had posted warnings on Google Play as far back as November 2013, that they suspected it was forcing pop-up ads to appear. Google Play has been plagued by app problems in the past. It has previously offered titles that provide secret remote access as well as ones that are malicious advertising networks. "Phone users ultimately have to trust the operating system vendor," says Steven Murdoch, "whether that's Google or Apple [or someone else] to protect them."

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2, Troll) by Arik on Friday February 06 2015, @01:12AM

    by Arik (4543) on Friday February 06 2015, @01:12AM (#141689) Journal
    "1. Google has blocked the apps and developer already."

    Sure, after distributing malware for years.

    "2. The actual offending apps are nowhere near as widespread as initially thought."

    Not a valid excuse.

    "3. The apps concealed their presence by delaying activation for up to 30 days after install."

    Definitely not a valid excuse. No one noticed that code? //keep track of install date, bad stuff won't start for 30 days.

    "4. The malicious code could have been in the ad serving software instead of the apps themselves."

    WTF? The malware server is to blame? No, the program that connects to it is to blame. Along with the people that wrote the OS that allows it.

    If google actually wanted to protect their customers there are so many places they could and should have stopped this. But the fact is they dont care at all about that, they care about making money from those malware servers so the last thing they will do is block them.

    --
    If laughter is the best medicine, who are the best doctors?
    Starting Score:    1  point
    Moderation   0  
       Troll=1, Underrated=1, Total=2
    Extra 'Troll' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   2