Android Photography and Gaming Apps Spammed Users, Downloaded 8 Million Times

News Android Spam Featured

It seems like there is no end to these stories. Every so often we’re reporting that more malicious apps have been found on Google Play. At some point it seems Google should get better at weeding those out.

Yet, here’s another story. Eighty-five Android apps were downloaded a total of 8 million times from Google Play. These photography and gaming apps flooded users with spam.

More Malicous Apps at Google Play

Google has now removed the apps, but not until after being download 8 million times and proving to be just adware disguised as photography and gaming apps.

Ecular Xu, a Trend Micro mobile threat response engineer, said the apps posed as photography utilities and games, enticing Android users to download them. Once downloaded to the phones, they pushed a non-stop flow of apps that were so difficult to close that it made it difficult to use the phones normally.

These applications included Magic Camera, Make Magical Photos, Blur Photo Editor, Background Replacement, Find the Difference: Smart Detective, and Color House2019.

Trend Micro detected that these apps served adware identified as AndroidOS_Hidenad.HRXH and noted to not be typical code.

News Android Spam Phone

After the apps were launched, two timesteps were recorded, both the current time and time it was installed, and it “would then register a Broadcast Receiver that allows Android apps to send or receive system and app events,” according to ZDnet.

When a device with these downloaded apps is unlocked, the timestamps are checked to see if it has been over thirty minutes since the install so that it can avoid sandboxing and analysis. If it’s been more than thirty minutes, a home screen shortcut is created, and the icon is hidden so that it can’t be easily uninstalled.

Whenever the device is unlocked again, ads are displayed. The timechecks are still at work to be sure the same ad doesn’t display too often. Additionally, these ads are shown fullscreen, forcing the user to watch it before being able to exit.

Downloader Beware

Be aware that according to Trend Micro’s research, more than half of the fraudulent mobile apps fall into the categories of “Games” and “Tools and Utilities.” And, of course, that’s not just adware – that also includes malware, spyware, and stalkerware.

Once they are reported and/or discovered, they are removed from the Google Play Store, but it seems like there must be something more they can do to prevent that from happening continuously.

What do you think Google can do to clean up this problem in the Google Play Store? Have you been affected by annoying Android adware apps? Tell us your thoughts and experiences in the comments below.

Subscribe to our newsletter!

Our latest tutorials delivered straight to your inbox

Laura Tucker Avatar

Read next

In 2016, archaeologists dated two rings of snapped stalagmites in France’s Bruniquel Cave to 176,500 years ago, evidence that Neanderthals had walked 336 metres into darkness with fire and built architecture deep underground long before modern humans reached Europe
Otto von Bismarck was 74 when Germany adopted the world’s first national old-age social insurance program in 1889, setting the pension age at 70 after years of fighting socialists with bans, laws, and a promise few workers would live long enough to use
When cosmonaut Valeri Polyakov stepped out of his Soyuz capsule in March 1995 after 437 consecutive days aboard Mir, doctors recorded him at several centimetres above his pre-flight height, and his spine had become so unaccustomed to gravity that the recovery team carried him to a chair rather than risk the compression of letting him walk.
When Bell Labs engineer Karl Jansky pointed a rotating antenna at the sky in 1932 looking for sources of transatlantic radio static, he kept picking up a faint hiss that peaked every 23 hours and 56 minutes, and he eventually realized he had become the first human to hear the center of the Milky Way.
When Harvard astronomer Cecilia Payne submitted her 1925 doctoral thesis arguing that the Sun was made almost entirely of hydrogen, the field’s senior figure Henry Norris Russell talked her into adding a line calling the result ‘almost certainly not real,’ and then published the same conclusion himself four years later to widespread acclaim.
When seismic waves from the Chicxulub impact reached what is now North Dakota roughly ten minutes after the asteroid struck, they appear to have triggered a ten-metre standing wave in an inland river that flung fish onto the bank and buried them under glass beads still falling from the sky.
When survivors near Lake Nyos woke on the morning of 22 August 1986, the cattle were dead in the fields, the birds had fallen out of the trees, and 1,746 of their neighbours were lying where they had stood the night before, with no fire, no flood, and no wound to explain it.
In October 2002, a Russian scientist named Dimitri Malashenkov stood up at a space conference in Houston and quietly explained that the dog Laika, whom the Soviet Union had publicly mourned as a heroic week-long orbiter in 1957, had actually died of heat and panic within about five hours of launch.