{"id":51073,"date":"2016-07-08T16:28:40","date_gmt":"2016-07-08T23:28:40","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=51073"},"modified":"2025-06-06T02:24:35","modified_gmt":"2025-06-06T09:24:35","slug":"trojanized-pokemon-go-android-app-found-wild","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/","title":{"rendered":"Trojanized Pok\u00e9mon GO Android App Found in the Wild"},"content":{"rendered":"<p style=\"text-align: justify;\">Pok\u00e9mon GO is a new mobile game that allows fans to \u201ccatch\u201d Pokemons in the real world using augmented reality and their smartphones capabilities such as\u00a0location technology and built-in cameras. The game was released on July 6 on both the Apple App Store and Google Play but only in Australia, New Zealand, and one day later in the United States. The app developer said that the game will be available in other countries soon\u00a0but a lot of Pokemon fans do not want to wait for the official release in other regions; they are eager to get the game as soon as possible, so many of them may look for the APK on third-party sites\u2014thus risking the security of their\u00a0devices and information.<\/p>\n<p style=\"text-align: justify;\">Taking into account the huge amount of Pokemon fans looking for the game on third-party sites, it was just a matter of time before a malicious version of the app appeared. One day after the release, McAfee Mobile Research found a Trojanized Pok\u00e9mon GO app being distributed in the wild. The filename of the malicious APK is very similar to the filename of the legitimate APK available on the third-party site apkmirror.com.\u00a0However, the malicious app was not found in apkmirror; it is probably being distributed on another site.<\/p>\n<p style=\"text-align: justify;\">When the malicious app is installed on the latest version of Android, there appears to be no difference from\u00a0the legitimate app. Android says it does not require any special access:<\/p>\n<p style=\"text-align: justify;\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-51077 size-medium\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_Install-189x300.png\" alt=\"SandroRAT_Install\" width=\"189\" height=\"300\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRAT_Install-189x300.png 189w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRAT_Install-643x1024.png 643w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRAT_Install.png 700w\" sizes=\"auto, (max-width: 189px) 100vw, 189px\" \/><br \/>\nHowever, when it is executed, the Trojanized app will request more permissions than the legitimate app, including suspicious ones suchas\u00a0the ability to send and view SMS messages:<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-51078 size-large\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_Premissions-1024x358.png\" alt=\"SandroRAT_Premissions\" width=\"1024\" height=\"358\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRAT_Premissions-1024x358.png 1024w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRAT_Premissions-300x105.png 300w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRAT_Premissions-768x269.png 768w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRAT_Premissions.png 1114w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><br \/>\nThis request happens only on\u00a0Android 6.0 and later; in older versions the user grants the permissions when the app is installed. Once the user has granted all permissions (at installation or during runtime), the game starts and works normally, but a controller starts in the background when there is a connectivity change or the device is started:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-51079 size-medium\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRATController-238x300.png\" alt=\"SandroRATController\" width=\"238\" height=\"300\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRATController-238x300.png 238w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRATController.png 698w\" sizes=\"auto, (max-width: 238px) 100vw, 238px\" \/><\/p>\n<p style=\"text-align: justify;\">This service belongs to the Android remote administration tool DroidJack (aka SandroRAT), which was injected in the legitimate app. DroidJack, currently sold on its own site at a cost of US$210 for a lifetime package, is not new. It has been seen in the wild since 2014. Although the terms and conditions on the official site explicitly says \u201cThe product shall not be used to commit any kind of crime or anything against the law,\u201d it was found in <a href=\"https:\/\/securingtomorrow.mcafee.com\/mcafee-labs\/sandrorat-android-rat-targeting-polish-banking-users-via-e-mail-phishing\/\">August 2014<\/a> targeting banking users in Poland. Probably due the use of the software to commit activities against the law, in <a href=\"https:\/\/www.europol.europa.eu\/content\/international-law-enforcement-action-against-droidjack-mobile-phone-malware\">October 2015<\/a> police across Europe and the United States carried out a number of house searches and arrests of suspected users of DroidJack. However, as we can see with this Trojanized game, the tool\u00a0is still active and being distributed in the wild.<\/p>\n<p style=\"text-align: justify;\">DroidJack can do almost anything on an\u00a0infected device: from stealing SMS messages, call logs, contact lists, browser history, geolocation, and installed apps to executing commands remotely to take pictures, record video, record calls, or send an SMS message. In the last\u00a0case, the Trojanized app communicates in the background with an IP address in Turkey and constantly reports if an app is in the foreground:<\/p>\n<p style=\"text-align: justify;\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-51075\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_AppForeground.png\" alt=\"SandroRAT_AppForeground\" width=\"285\" height=\"57\" \/><br \/>\nOr if the screen is off (in order to, for example, open a link using the default browser):<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-51074\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/PokemonGo_ScreenOff.png\" alt=\"PokemonGo_ScreenOff\" width=\"287\" height=\"60\" \/><br \/>\nSpoofing or injecting malware into popular apps are the most effective ways to trick users into installing malware. Although Google Play is not malware free, the chances of getting infected from there are much lower than installing apps from third-party sites, especially file-sharing sites. For that reason, even if reputable websites tell you to enable the installation from unknown sources to install an APK downloaded from a third-party site, it is better to wait a couple of days until the official app is available in your region.<\/p>\n<h2>McAfee Mobile Security<\/h2>\n<p>McAfee Mobile Security detects this Android threat as Android\/SandroRAT and alerts mobile users if it is present, while protecting them from any data loss. For more information about McAfee Mobile Security, visit <a href=\"http:\/\/www.mcafeemobilesecurity.com\">http:\/\/www.mcafeemobilesecurity.com<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Pok\u00e9mon GO is a new mobile game that allows fans to \u201ccatch\u201d Pokemons in the real world using augmented reality&#8230;<\/p>\n","protected":false},"author":462,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[442],"tags":[37,180,214],"coauthors":[1104],"class_list":["post-51073","post","type-post","status-publish","format-standard","hentry","category-mcafee-labs","tag-android","tag-malware","tag-mobile-security1"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Trojanized Pok\u00e9mon GO Android App Found in the Wild | McAfee Blog<\/title>\n<meta name=\"description\" content=\"Pok\u00e9mon GO is a new mobile game that allows fans to \u201ccatch\u201d Pokemons in the real world using augmented reality and their smartphones capabilities such\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Trojanized Pok\u00e9mon GO Android App Found in the Wild | McAfee Blog\" \/>\n<meta property=\"og:description\" content=\"Pok\u00e9mon GO is a new mobile game that allows fans to \u201ccatch\u201d Pokemons in the real world using augmented reality and their smartphones capabilities such\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/\" \/>\n<meta property=\"og:site_name\" content=\"McAfee Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/McAfee\/\" \/>\n<meta property=\"article:published_time\" content=\"2016-07-08T23:28:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-06T09:24:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRAT_Install.png\" \/>\n\t<meta property=\"og:image:width\" content=\"700\" \/>\n\t<meta property=\"og:image:height\" content=\"1114\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Carlos Castillo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@carlosacastillo\" \/>\n<meta name=\"twitter:site\" content=\"@McAfee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Carlos Castillo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/\"},\"author\":{\"name\":\"Carlos Castillo\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/894ee4a790607d505a13c24955d2edbe\"},\"headline\":\"Trojanized Pok\u00e9mon GO Android App Found in the Wild\",\"datePublished\":\"2016-07-08T23:28:40+00:00\",\"dateModified\":\"2025-06-06T09:24:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/\"},\"wordCount\":693,\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_Install-189x300.png\",\"keywords\":[\"android\",\"malware\",\"mobile security\"],\"articleSection\":[\"McAfee Labs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/\",\"name\":\"Trojanized Pok\u00e9mon GO Android App Found in the Wild | McAfee Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_Install-189x300.png\",\"datePublished\":\"2016-07-08T23:28:40+00:00\",\"dateModified\":\"2025-06-06T09:24:35+00:00\",\"description\":\"Pok\u00e9mon GO is a new mobile game that allows fans to \u201ccatch\u201d Pokemons in the real world using augmented reality and their smartphones capabilities such\",\"breadcrumb\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#primaryimage\",\"url\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_Install-189x300.png\",\"contentUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_Install-189x300.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Other Blogs\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"McAfee Labs\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Trojanized Pok\u00e9mon GO Android App Found in the Wild\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"name\":\"McAfee Blog\",\"description\":\"Internet Security News\",\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\",\"name\":\"McAfee\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"width\":1286,\"height\":336,\"caption\":\"McAfee\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/McAfee\/\",\"https:\/\/x.com\/McAfee\",\"https:\/\/www.linkedin.com\/company\/mcafee\/\",\"https:\/\/www.youtube.com\/McAfee\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/894ee4a790607d505a13c24955d2edbe\",\"name\":\"Carlos Castillo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/729f5b9d2761341175762c5f10652607\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Carlos-Castillo-96x96.jpg\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Carlos-Castillo-96x96.jpg\",\"caption\":\"Carlos Castillo\"},\"description\":\"Carlos Castillo specializes in the analysis of mobile threats and Android malware. Castillo performs static and dynamic analysis of suspicious applications to support McAfee\u2019s Mobile Security for Android product. He is the author of the McAfee-published white paper, \\\"Android Malware Past, Present, and Future,\u201d and wrote the \u201cHacking Android\\\" section of the book, \\\"Hacking Exposed 7: Network Security Secrets &amp; Solutions.\u201d As a recognized mobile malware researcher, Castillo has presented at several security industry events, including 8.8 Computer Security Conference and Segurinfo, a leading information security conference in South America. Prior to his position at McAfee, Castillo performed security compliance audits for the Superintendencia Financiera of Colombia, and worked at security startup Easy Solutions Inc., where he conducted penetration tests on web applications, helped shut down phishing and malicious websites, supported security and network appliances, performed functional software testing, and assisted in research and development related to anti-electronic fraud. Castillo joined the world of malware research when he won ESET Latin America\u2019s Best Antivirus Research contest with a paper titled, \u201cSexy View: The Beginning of Mobile Botnets.\u201d Castillo holds a degree in systems engineering from the Universidad Javeriana in Bogot\u00e1, Colombia.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/carlosacastillo\/\",\"https:\/\/x.com\/carlosacastillo\"],\"url\":\"https:\/\/www.mcafee.com\/blogs\/author\/carlos-castillo\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Trojanized Pok\u00e9mon GO Android App Found in the Wild | McAfee Blog","description":"Pok\u00e9mon GO is a new mobile game that allows fans to \u201ccatch\u201d Pokemons in the real world using augmented reality and their smartphones capabilities such","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Trojanized Pok\u00e9mon GO Android App Found in the Wild | McAfee Blog","og_description":"Pok\u00e9mon GO is a new mobile game that allows fans to \u201ccatch\u201d Pokemons in the real world using augmented reality and their smartphones capabilities such","og_url":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/","og_site_name":"McAfee Blog","article_publisher":"https:\/\/www.facebook.com\/McAfee\/","article_published_time":"2016-07-08T23:28:40+00:00","article_modified_time":"2025-06-06T09:24:35+00:00","og_image":[{"width":700,"height":1114,"url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/SandroRAT_Install.png","type":"image\/png"}],"author":"Carlos Castillo","twitter_card":"summary_large_image","twitter_creator":"@carlosacastillo","twitter_site":"@McAfee","twitter_misc":{"Written by":"Carlos Castillo","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#article","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/"},"author":{"name":"Carlos Castillo","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/894ee4a790607d505a13c24955d2edbe"},"headline":"Trojanized Pok\u00e9mon GO Android App Found in the Wild","datePublished":"2016-07-08T23:28:40+00:00","dateModified":"2025-06-06T09:24:35+00:00","mainEntityOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/"},"wordCount":693,"publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#primaryimage"},"thumbnailUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_Install-189x300.png","keywords":["android","malware","mobile security"],"articleSection":["McAfee Labs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/","url":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/","name":"Trojanized Pok\u00e9mon GO Android App Found in the Wild | McAfee Blog","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#primaryimage"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#primaryimage"},"thumbnailUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_Install-189x300.png","datePublished":"2016-07-08T23:28:40+00:00","dateModified":"2025-06-06T09:24:35+00:00","description":"Pok\u00e9mon GO is a new mobile game that allows fans to \u201ccatch\u201d Pokemons in the real world using augmented reality and their smartphones capabilities such","breadcrumb":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#primaryimage","url":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_Install-189x300.png","contentUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/SandroRAT_Install-189x300.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/trojanized-pokemon-go-android-app-found-wild\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.mcafee.com\/blogs\/"},{"@type":"ListItem","position":2,"name":"Other Blogs","item":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/"},{"@type":"ListItem","position":3,"name":"McAfee Labs","item":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/"},{"@type":"ListItem","position":4,"name":"Trojanized Pok\u00e9mon GO Android App Found in the Wild"}]},{"@type":"WebSite","@id":"https:\/\/www.mcafee.com\/blogs\/#website","url":"https:\/\/www.mcafee.com\/blogs\/","name":"McAfee Blog","description":"Internet Security News","publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.mcafee.com\/blogs\/#organization","name":"McAfee","url":"https:\/\/www.mcafee.com\/blogs\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","width":1286,"height":336,"caption":"McAfee"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/McAfee\/","https:\/\/x.com\/McAfee","https:\/\/www.linkedin.com\/company\/mcafee\/","https:\/\/www.youtube.com\/McAfee"]},{"@type":"Person","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/894ee4a790607d505a13c24955d2edbe","name":"Carlos Castillo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/729f5b9d2761341175762c5f10652607","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Carlos-Castillo-96x96.jpg","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Carlos-Castillo-96x96.jpg","caption":"Carlos Castillo"},"description":"Carlos Castillo specializes in the analysis of mobile threats and Android malware. Castillo performs static and dynamic analysis of suspicious applications to support McAfee\u2019s Mobile Security for Android product. He is the author of the McAfee-published white paper, \"Android Malware Past, Present, and Future,\u201d and wrote the \u201cHacking Android\" section of the book, \"Hacking Exposed 7: Network Security Secrets &amp; Solutions.\u201d As a recognized mobile malware researcher, Castillo has presented at several security industry events, including 8.8 Computer Security Conference and Segurinfo, a leading information security conference in South America. Prior to his position at McAfee, Castillo performed security compliance audits for the Superintendencia Financiera of Colombia, and worked at security startup Easy Solutions Inc., where he conducted penetration tests on web applications, helped shut down phishing and malicious websites, supported security and network appliances, performed functional software testing, and assisted in research and development related to anti-electronic fraud. Castillo joined the world of malware research when he won ESET Latin America\u2019s Best Antivirus Research contest with a paper titled, \u201cSexy View: The Beginning of Mobile Botnets.\u201d Castillo holds a degree in systems engineering from the Universidad Javeriana in Bogot\u00e1, Colombia.","sameAs":["https:\/\/www.linkedin.com\/in\/carlosacastillo\/","https:\/\/x.com\/carlosacastillo"],"url":"https:\/\/www.mcafee.com\/blogs\/author\/carlos-castillo\/"}]}},"_links":{"self":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/51073","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/users\/462"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/comments?post=51073"}],"version-history":[{"count":2,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/51073\/revisions"}],"predecessor-version":[{"id":215204,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/51073\/revisions\/215204"}],"wp:attachment":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media?parent=51073"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/categories?post=51073"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/tags?post=51073"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/coauthors?post=51073"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}