

They try to dodge the static and dynamic analysis of security solutions via these techniques: It is clear that these apps are equipped with several effective evasion tactics. Screenshots showing the full-screen advertisements Screen captures of codes showing how the malicious app’s icon is hidden or removedįigure 3. The user cannot use the usual methods to exit the ad - it can only be closed by clicking the back or home key.įigure 2. Similar to our previous disclosures, these latest apps disguise their icons and push full-screen ads onto a victim’s device.

New versions are still constantly being uploaded, and we continue to monitor their progress. We have been closely following mobile adware fraud for years and found these types of apps also quite prevalent in 2018. Google needs to remove wave after wave - before the August batch of adware apps, there had also been over 100 adware apps found in July and adware that affected over 9 million users in January. These adware apps have been a long-running issue for mobile companies. This recent incident continues an ongoing trend of mobile adware surges - just last August we discovered 85 fake photography and gaming adware apps that also employed unique techniques to evade detection.

These apps are no longer live but before they were taken down by Google, the total number of downloads was more than 3 million. These apps are typical adware, hiding themselves within mobile devices to show ads and deploying anti-uninstall and evasion functions. We recently found 49 new adware apps on Google Play, disguised as games and stylized cameras.
