Over 3,000,000 people downloaded a new Android malware family from the Google Play Store that discreetly subscribes users to premium services.
Maxime Ingrao, an Evina security researcher, found the malware, known as “Autolycos,” in at least eight Android applications, of which two are still downloadable from the Google Play Store as of this writing.
The two apps still available are named ‘Funny Camera’ by KellyTech, which has over 500,000 installations, and ‘Razer Keyboard & Theme’ by rxcheldiolola, which counts over 50,000 installs on the Play Store.
The remaining six applications have been removed from the Google Play Store, but those who still have them installed risk being charged with costly subscriptions by the malware’s activities.
- Vlog Star Video Editor (com.vlog.star.video.editor) – 1 million downloads
- Creative 3D Launcher (app.launcher.creative3d) – 1 million downloads
- Wow Beauty Camera (com.wowbeauty.camera) – 100,000 downloads
- Gif Emoji Keyboard (com.gif.emoji.keyboard) – 100,000 downloads
- Freeglow Camera 1.0.0 (com.glow.camera.open) – 5,000 downloads
- Coco Camera v1.1 (com.toomore.cool.camera) –1,000 downloads
During a discussion with Ingrao, the researcher told Droid Tools that he discovered the apps in June 2021 and reported his findings to Google at the time.
Although Google acknowledged receiving the report, it took the company six months to remove the set of six, while two malicious apps remain on the Play Store to this day.
After so much time had passed since the initial reporting, the researcher disclosed his findings publicly.
In place of using Webview, Autolycos uses stealthy malicious behavior to execute URLs on remote browsers and then include the results in HTTP requests.
This behavior is intended to hide its actions from users of infected devices so that they won’t be noticed.
When malicious apps were installed on a smartphone, they frequently asked for authorization to view SMS content, which gave them access to a victim’s SMS text messages.
The Autolycos owners launched various social media advertising campaigns to draw in new users to the apps. Ingrao discovered 74 Facebook ad campaigns for the Razer Keyboard & Theme alone.
Additionally, while some fraudulent apps on the Play Store received unavoidably bad reviews, some with less downloads continue to have positive user ratings thanks to fake reviews.
Android users should have Play Protect activated, monitor background internet data and battery usage, and attempt to install the fewest number of apps possible on their handsets in order to protect themselves against these attacks.
Samsung Galaxy Watch 8
Google Pixel Watch 4
Google Pixel 9
Keep Reading
WhatsApp is finally addressing one of the biggest gaps in its web client, as WhatsApp Web now supports audio and video calls. This requires no download or installation, since it’s built directly into WhatsApp Web, which has also picked up support for screen sharing, reactions, and a dedicated Calls tab showing full call history and […]
While the Pixel 9 lineup is still fresh, with its Tensor G4 chip and sleek hardware, new reports are already surfacing about the Pixel 10 and Pixel 11. For anyone who held off on the Pixel 9 series hoping for a bigger internal upgrade from Google, there may be good news on the horizon. Google […]
Practically every streaming service not named Netflix has turned to bundling over the past few years, with competitors teaming up to deliver combo packs like Disney+ and HBO Max. No service has been bundled quite as often as Peacock, though, and YouTube Premium subscribers are now joining the long list of ways to gain access […]
The invites for Google’s Pixel event just landed, and the leaks have already laid out a stacked rundown of the Google Pixel 11 and Tensor G6. Tech forums have already made up their minds. Going by the leaks, the G6 looks like a regression. The G6 comes up short on CPU cores, and its graphics […]
Google is set to unveil the Pixel 11 family on August 12, and just ahead of that event, the company’s VP of Devices and Services, Shakil Barkat, has confirmed what many were expecting: prices are going up across the lineup. Google Confirms Pixel Price Adjustments Barkat explained that, like other consumer tech companies, Google is […]
Google released its first official Pixel 11 Pro teaser today, confirming a gold finish and giving the clearest look yet at Pixel Glow – the light-up feature Google is betting on to differentiate itself from rivals like the iPhone 17 Pro Max. The Made by Google event is set for August 12. What Google actually […]
Comments & Discussions
Join the conversation! We use Disqus to handle comments. Click the button below to load the comment section.