'Joker' Malware Found on 24 Popular Android Apps on Google Play

Cyber-security researchers over at CSIS accept detailed a scary new Android malware that they say is designed to silently sign-up unsuspecting users upwardly for online subscription services. Named 'Joker' by the CSIS researchers, the malware starts off as a Trojan that delivers a 2d stage component, which, the researchers say, is both a spyware and a stealthy subscription bot that "silently simulates the interaction with advertisement websites, steals the victim's SMS messages, the contact listing and device info".

According to CSIS malware analyst, Aleksejs Kuprins, the automated interaction with the advertisement websites includes simulation of clicks and entering of the authorization codes for premium service subscriptions. "This strategy works by automating the necessary interaction with the premium offer's webpage, entering the operator's offer code, then waiting for a SMS message with a confirmation code and extracting information technology using regular expressions. Finally, the Joker submits the extracted code to the offer'south webpage, in order to authorize the premium subscription", he said.

The malware is said to be plant in at least 24 Android apps with more than 472,000 installs on Google Play and, is said to accept affected users in at least 37 countries, including India, the UK and the US. Thankfully, though, Google has already been removing these apps even before being notified by CSIS.

Android is no stranger to malicious apps, with reports of widespread malware a dime-a-dozen. The company terminal July removed a bunch of malicious apps from the Play Shop to comprise the nasty 'Amanuensis Smith' malware, which is said to have afflicted 25 million devices, largely in India, Pakistan and Bangladesh.