Over 50 Android apps have been found hiding malware, once again. Google has removed the apps from the Play Store, but you should check your devices to ensure you don’t have any of them installed.
In fact, BleepingComputer reports that this group of malicious Android apps was downloaded over 300,000 times. As a result, that led to “stolen data, social media account takeovers, SMS interception, and unauthorized charges to their mobile numbers.” Ouch.
In that case, if you have any apps installed from the list below, delete them immediately. After that, it’s probably worth doing a device clean-up to remove any stray files.
Delete these Android apps, they contain malware
50 Android apps have been found to contain the Joker malware. Thankfully, all of them have been removed from the Google Play Store, but you should check your device to ensure you don’t have any installed.
For the most part, the Joker malware is an information stealer, taking SMS content and contact lists. Then, it subscribes the victim to premium wireless application protocol (WAP) services.
As shown below, here is the full list of Android apps found to be hiding the Joker malware (via Zscaler):
Simple Note Scanner – com.wuwan.pdfscan
|
Simple Note Scanner – com.wuwan.pdfscan |
|
|
|
Universal PDF Scanner – com.unpdf.scan.read.docscanuniver |
|
|
Private Messenger – com.recollect.linkus |
|
|
Premium SMS – com.premium.put.trustsms |
|
|
Smart Messages – com.toukyoursms.timemessages |
|
|
Text Emoji SMS – messenger.itext.emoji.mesenger |
|
|
Blood Pressure Checker – com.bloodpressurechecker.tangjiang |
|
|
Funny Keyboard – com.soundly.galaxykeyboard |
|
|
Memory Silent Camera – com.silentmenory.timcamera |
|
|
Custom Themed Keyboard – com.custom.keyboardthemes.galaxiy |
|
|
Light Messages – com.lilysmspro.lighting |
|
|
Themes Photo Keyboard – com.themes.bgphotokeyboard |
|
|
Send SMS – exazth.message.send.text.sms |
|
|
Themes Chat Messenger – com.relish.messengers |
|
|
Instant Messenger – com.sbdlsms.crazymessager.mmsrec |
|
|
Cool Keyboard – com.colate.gthemekeyboard |
|
|
Fonts Emoji Keyboard – com.zemoji.fontskeyboard |
|
|
Mini PDF Scanner – com.mnscan.minipdf |
|
|
Smart SMS Messages – com.sms.mms.message.ffei.free |
|
|
Creative Emoji Keyboard – com.whiteemojis.creativekeyboard.ledsloard |
|
|
Fancy SMS – con.sms.fancy |
|
|
Fonts Emoji Keyboard – com.symbol.fonts.emojikeyboards |
|
|
Personal Message – com.crown.personalmessage |
|
|
Funny Emoji Message – com.funie.messagremo |
|
|
Magic Photo Editor – com.amagiczy.photo.editor |
|
|
Professional Messages – com.adore.attached.message |
|
|
All Photo Translator – myphotocom.allfasttranslate.transationtranslator |
|
|
Chat SMS – com.maskteslary.messages |
|
|
Smile Emoji – com.balapp.smilewall.emoji |
|
|
Wow Translator – com.imgtop.camtranslator |
|
|
All Language Translate – com.exclusivez.alltranslate |
|
|
Cool Messages – com.learningz.app.cool.messages |
|
|
Blood Pressure Diary – bloodhold.nypressure.mainheart.ratemy.mo.depulse.app.tracker.diary |
|
|
Chat Text SMS – com.echatsms.messageos |
|
|
Hi Text SMS – ismos.mmsyes.message.texthitext.bobpsms |
|
|
Emoji Theme Keyboard – com.gobacktheme.lovelyemojikeyboard |
|
|
iMessager – start.me.messager |
|
|
Text SMS – com.ptx.textsms |
|
|
Camera Translator – com.haixgoback.outsidetext.languagecameratransla |
|
|
Come Messages – com.itextsms.messagecoming |
|
|
Painting Photo Editor – com.painting.pointeditor.photo |
|
|
Rich Theme Message – com.getmanytimes.richsmsthememessenge |
|
|
Quick Talk Message – mesages.qtsms.messenger |
|
|
Advanced SMS – com.fromamsms.atadvancedmmsopp |
|
|
Professional Messenger – com.akl.smspro.messenger |
|
|
Classic Game Messenger – com.classcolor.formessenger.sic |
|
|
Style Message – com.istyle.messagesty |
|
|
Private Game Messages – com.message.game.india |
|
|
Timestamp Camera – allready.taken.photobeauty.camera.timestamp |
|
|
Social Message – com.colorsocial.message |
Another app, Vanilla Snap Camera (cam.vanilla.snapp) was stealing Facebook logins. This was installed roughly 5,000 times, so ensure it’s not on your devices.
And one last app, Unicc QR Scanner (com.qrdscannerratedx), hid Coper malware. In this case, Coper targets banking apps in Europe, Australia, and South America. Once installed, it can manage SMS, log keystrokes, and almost anything the hacker can think of.
Stay safe on your devices
With this in mind, you can take a few simple steps to protect yourself from malware on your Android device.
First, avoid installing unknown messaging apps. In particular, those sent to you by friends who could already be infected. That’s because messaging apps request access to SMS and can take your two-factor authentication one-time-passwords.
Additionally, read app reviews before installing, and stick to large, well-known publishers. Furthermore, pay attention to what permissions the app is asking for. If anything seems weird, it probably is, so delete it immediately.
Have any thoughts on this? Let us know down below in the comments or carry the discussion over to our Twitter or Facebook.
