The original Joker malware was identified on Play Store back in September 2019.
Android is faced with a multitude of hostile malware families that try to find their way back in from time to time. One such malware strain happens to be the Joker which has also been previously caught tricking users into subscribing to premium services without their consent.
This time, it’s back to do the same albeit with a different technique in order to evade Google’s security filters. This is alarming for Android users since just yesterday it was reported that dangerous Cerberus banking trojan was also found on Google Play Store.
Reported by Checkpoint, the new variant makes use of a couple of components to do its job – a notification listener service which is a part of the legitimate applications, and a “dynamic dex file” that it retrieves from its C2 server in order to make users successfully subscribe.
Källa: New variant of Joker malware found in Android apps on Play Store
0 kommentarer