{"id":98940,"date":"2020-03-03T21:01:33","date_gmt":"2020-03-04T05:01:33","guid":{"rendered":"\/blogs\/?p=98940"},"modified":"2024-02-01T06:14:19","modified_gmt":"2024-02-01T14:14:19","slug":"mobile-threat-report-q1-2020","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/mobile-security\/mobile-threat-report-q1-2020\/","title":{"rendered":"Is Mobile Malware Playing Hide and Steal on Your Device?"},"content":{"rendered":"

Over the years, we\u2019ve all grown accustomed to using our smartphones and mobile apps to support our lifestyles. We as consumers have developed expectations of how devices can enhance our everyday lives- from online banking transactions to handling work correspondence on the go. But as we become more reliant on our smart devices and apps, hackers use this dependency as an opportunity to gain unwarranted access to our personal data. According to McAfee\u2019s latest Mobile Threat Report<\/a>, hidden apps are the most active mobile threat facing consumers, generating nearly 50% of all malicious activities in 2019. Let\u2019s dive into these mobile threats and how they could potentially impact your life.<\/p>\n

Don\u2019t Let These Mobile Threats Commandeer Your Device<\/h2>\n

LeifAccess<\/h3>\n

LeifAccess (also known as Shopper) is an Android-based malware distributed through social media, gaming platforms, and fraudulent advertising. Once installed, this stealthy hides its icon and displays fake security notifications, hoping to trick the user into granting the malware accessibility access. LeifAccess\/Shopper has also been found to use third-party logins to cheat app ranking systems and wreak more havoc on victims\u2019 devices. The malware uses the accessibility features in Android to quietly create third-party accounts, automatically download apps from Google Play, and post reviews using names and emails configured from the victim\u2019s device.<\/p>\n

According to the Mobile Threat Report<\/a>, hackers are also tricking users into installing adware onto their devices, redirecting them to a variety of fraudulent ads. Because digital ad revenue is simply based on screens displayed and clicks, hackers are quick to exploit this threat so they can collect fraudulent ad revenue at the expense of unsuspecting users. Due to the volume and speed of the redirects, many consumers don\u2019t even realize that their device is infected or that their data is being collected.<\/p>\n

HiddenAds<\/h3>\n

HiddenAds masquerades as genuine apps like Call of Duty, Spotify, and FaceApp to trick users into downloading them. But once the app is installed on the victim\u2019s device, the app icon changes to one that mimics the Settings icon. When the victim clicks on it, the app displays a fake error message that reads \u201cApplication is unavailable in your country. Click OK to uninstall.” However, clicking OK completes the malicious app installation process and then hides the fake Settings icon, making it nearly impossible to find and delete the malware.<\/p>\n

MalBus<\/h3>\n

McAfee researchers also discovered a new targeted attack hidden in a legitimate South Korean transit app. Called MalBus, this new attack method exploits the app developer\u2019s hacked Google Play account. Once the hackers accessed the developer\u2019s account, they added an additional library to the apps and uploaded them to Google Play. Now, MalBus spyware can phish for \u00a0<\/a> with a local webpage that mimics the real Google login screen. Additionally, MalBus can drop a malicious trojan on the victim\u2019s device, searching for specific military or political keywords. If these keywords are found, the victim\u2019s matching files are uploaded to a remote server without their knowledge.<\/p>\n

How to Stay Protected<\/h2>\n

As hackers continue to target consumers through the channels they spend the most time on \u2013 their mobile devices \u2013 it\u2019s important for users to reflect on the current digital landscape to help protect their data, as well as their family and friends. Follow these security tips to defend against stealthy mobile threats:<\/p>\n