Loud Bleeding computer the apps were infiltrated with Android malware Goldoson. The malicious software was integrated into a library used by the developers of numerous applications. The apps affected include “L.POINT with L.PAY”, “Swipe Brick Breaker”, “Money Manager Expense & Budget”, “Pikicast” and “Korea Subway Info”. A complete list can be found here find.
Android malware Goldoson clicks on advertising links to generate revenue
McAfee security researchers have discovered that Goldoson spies on users of infected smartphones. For this purpose, data on installed apps and devices connected via WLAN and Bluetooth is collected. Furthermore, the GPS location of the user is tapped. After the malware runs, it connects to a hackers’ server. A retrieved configuration determines what data Goldoson should transfer. The malware is also used to click on advertising banners and thus generate income.
Library since removed from apps
The developers of the affected apps have been notified of the security issue and asked to replace the third-party library. All apps that still contain the malicious code have already been removed from the Google Play Store. Anyone using an affected app should delete the tool or install the latest update.
- Hackers circumvent Google security measures: 60 apps infected.
- Malicious software Goldoson integrated into library.
- Spied on users, collected data, tapped GPS location.
- Ad banners clicked, revenue generated.
- Developer informed, affected apps deleted/updated.
See also:
