MALICIAOUS SOFTWARES
Malicious Gaming App Infects More than 1 Million Android Users 2015
It's not at all surprising that the Google Play Store is
surrounded by a number of malicious applications that may gain users'
attention to fall victim for one, but this time it might be even worse
than you thought.
Threat researchers from security firm ESET have discovered a malicious Facebook-Credentials-Stealing Trojan masquerading as an Android game that has been downloaded by more than a Million Android users.
Malicious Android Apps downloaded 50,000-1,000,000 times
The Android game, dubbed "Cowboy Adventure," and another malicious game, dubbed "Jump Chess" – downloaded up to 50,000 times, have since been removed from Google Play Store.
However, before taking them off from the app store, the creepy game apps may have compromised anunknown number of victims' Facebook credentials.
Both
the games were created by the same software developer, Tinker Studio and
both were used to gather social media credentials from unsuspecting
users.
How Cowboy Adventure victimizes Android users?
Once installed, Cowboy Adventure produced a fake Facebook login window that prompted users to enter their Facebook usernames along with their passwords. A practice known as OAuth in which a 3rd party asks your Facebook login.
However,
if users provide their credentials to Cowboy Adventure app, the
malicious code within the game app allegedly sent their credentials to
the attacker's server.
Comments
Post a Comment