porn-clicker-trojan-play-store

Android users: beware the porn-clicker Trojan in Play Store

Tags :- Avira Tech Support | Avira Support NumberAvira Refund.

Android devices are getting infected due to a Clicker Trojan, a family of Android malware, which is hidden in counterfeit versions of various apps. After installation, it uses the browser of the infected device to click on porn ads in the background. The way in which this Trojan manages to infect isn’t at all complicated. The virus is disguised in a version of a very popular game or app, from which it “borrows” even the name and icon. Also, the malicious apps are available for free, and are completely unrelated with the original.

Apps and games to avoid

As we have mentioned before, the Clicker Trojan usually has a popular name such as “Temple Run 3”, “Subway Surfers 2”, “Travel Wallpapers”, etc., and each app has a different icon matching the name. Once they are installed, they start a hidden browsing session, load different porn websites and trick the user to click on ads. This way, the malware authors are collecting revenue.

google-play-fake-app

Avira Antivirus for Android detects the Trojan

Avira Virus Lab ensures that Avira Antivirus detects the Trojan and they explain how it is possible for the porn-clicker to trick Google’s filters:

suspicious-permissions

A common feature of the Clicker family is that it is requesting “draw over other apps” permissions.

“The Clicker Trojan is a family of Android Malware that poses as legitimate apps but once they are installed they click on Porn ads in the background,” said Mihai Grigorescu, Virus Analyst at Avira Protection Lab – ”They are present in Google Play as they have been able to bypass Google’s automatic filters as well as the human review process. Avira Antivirus is detecting the Trojan as Android/Clicker with subtypes like Android/Clicker.B, Android/Clicker.AC, etc. and we are successfully blocking it.”

This type of malware usually deletes the shortcut from the android main menu, so that it apears it is not installed. You can find it by going to Settings and then Applications and safely uninstall it from there.

Also, in order to spot these fake Apps, Avira advises Android users to check carefully the name of the publisher, the number of downloads, and the number of positive reviews. The more comments it has, the better. Otherwise, when you notice plenty of bad reviews for an app, it’s a suspicious sign and please inform our Virus Lab team about this.

Source : blog.avira.com

Avira Tech Support : Blog

Leave a Comment