17 Android Apps Caught Hiding and Displaying Aggressive Ads
We all rely on Apple and Google to keep malicious software out of its app stores, but the vetting system Google uses for Android apps is in desperate need of review. 17 vetted and popular apps have been hiding their presence on devices and showing aggressive ads to users.
The apps in question are listed below and in total have been downloaded over 550,000 times:
Car Racing 2019
4K Wallpaper (Background 4K Full HD)
Backgrounds 4K HD
QR Code Reader & Barcode Scanner Pro
File Manager Pro - Manager SD Card/Explorer
VMOWO City: Speed Racing 3D
Barcode Scanner
Screen Stream Mirroring
QR Code - Scan & Read a Barcode
Period Tracker - Cycle Ovulation Women's
QR & Barcode Scan Reader
Wallpapers 4K, Backgrounds HD
Transfer Data Smart
Explorer File Manager
Today Weather Radar
Mobnet.io: Big Fish Frenzy
Clock LED
As Bitdefender reports, none of the apps are classed as malware, but the best way to summarize what they are doing is as "riskware."
Each app uses a number of techniques to bypass Google's vetting system to ensure they make it on to the Play Store. These techniques include, "waiting 48 hours before hiding their presence on the device, splitting the app's code into multiple resource files, and holding off displaying ads until 4 hours after app installation."
Ads are then displayed regularly, but randomly, so it's very hard to spot a pattern. A job scheduling system is used to decide when to potentially show a new ad. This can be triggered when a user is in the app and pressing buttons, or outside the app when, for example, the device is unlocked.
Tricking Google into thinking the apps aren't malicious seems to be an exercise in presenting themselves as "average." The right files form part of the apps and the long delay before ads are shown combined with the randomness of them being triggered seems to be enough to fool the vetting system. Some reviews from users have flagged these apps as adware, but they remained live on the Play Store regardless.
Bitdefender has reported all 17 apps to Google and they are being removed from the store.
-
Bernie Sanders’ DNC speech sounded like everyone else’s. That’s astonishing.S. Korean diplomat appointed as advisory group member of UN emergency response fund极飞助春耕 新农人用上新农具TNT's 'Claws' is the juicy summer binge we deserve: Season 3 reviewNorth Korea says it conducted important test to develop multiple warhead missileDiverse scenarios considered to develop North Korea's economyIf you want to include a good dog in your next Airbnb rental, we have the place for you紧紧围绕脱贫攻坚中心工作 全力推进民政事业稳健发展Google Gemini now allows AIDesperate Coinbase customers turn to SEC with allegations of fraud
- ·Yoon touts pension reform drive amid stagnant popularity rating
- ·紧紧围绕脱贫攻坚中心工作 全力推进民政事业稳健发展
- ·Powerpaste packs clean hydrogen energy in a safe, convenient gray goop
- ·Battery anode allows for faster charging via free
- ·How do you make safe, cheap nuclear reactors? Bury them a mile deep
- ·[Graphic News] Juvenile fraud rises 16% in 2019
- ·Old North Korean money fraud alarms spy agency
- ·New social distancing plan will consider economy more, health officials say
- ·Cicadas love to land on people. Experts explain why.
- ·Revised social distancing rules to be announced this weekend
- ·Kim returns to Pyongyang from Singapore
- ·Golf club gathering emerges as hotbed of novel coronavirus
- ·广州市白云区供销联社携手6所院校15支队伍,加力提速推进“百千万工程”
- ·Australia plans world's biggest battery (again), at 1.2 gigawatts
- ·Can Microsoft Cortana catch up to Alexa, Siri, and Google Assistant?
- ·Amazon Fire TV Cube review: Alexa hasn't killed remotes just yet
- ·Footage of Kim Yo
- ·新丰县:巧用“一突出六强化”指挥棒,奏响春耕备耕“进行曲”
- ·Karachi to rely on usual suspects for PSL 6
- ·Everton, Arsenal avoid Cup scares, Chorley beat virus
- ·Weather update for second Pak vs Ban second Test match day one
- ·China the biggest winner of Kim
- ·Bus driver gets so into his jam, he gets up and dances while speeding down the road
- ·Bethesda's E3 2019 games showcase: Watch the best and biggest trailer
- ·3D Game Rendering 101
- ·A totally bizarre interview just started a feud between Ivana and Melania Trump
- ·How much for Oasis tickets? Fans joke about splurging on reunion shows
- ·WhatsApp adds group chat option for only admins to send messages
- ·Newcastle say Saint
- ·N. Korea says S. Korea responsible for death of fisheries official
- ·24 Museums Dedicated to Black History
- ·New social distancing plan will consider economy more, health officials say
- ·Battery anode allows for faster charging via free
- ·There's a deepfake of Zuckerberg on Instagram. Your move, Facebook.
- ·中山古镇:到苏炳添家乡看“村BA”,来一场说走就走的美食之旅
- ·Desperate Coinbase customers turn to SEC with allegations of fraud