Cybercriminals can pay $20k to spread malware on the Google Play store

Date:
Wed, 12 Apr 2023 11:00:15 +0000

Description:
The keys to the kingdom are expensive even in the world of crime, but their potential reach may be worth it.

FULL STORY ======================================================================

Hackers are paying up to $20,000 to get malicious apps into Google's Play Store, researchers have found.

Getting malware into the Google Play Store is something of a jackpot for cybercriminals. The app repository enjoys a high level of trust among Android users, and most of the time, theyre happy to download apps found there
without second-guessing their intentions.

To maintain its high level of trust, Google takes a number of precautions, including pre-screening apps to make sure theyre legitimate, and removing malicious ones as soon as theyre discovered. Installing malware via updates

Thats why hackers whove found a way to sneak malicious apps into the repository are happy to sell that backdoor - for as much as $20,000. This is according to cybersecurity researchers from Kaspersky, as The Register reports. Read more

Users warned of Microsoft data harvesting

Google under investigation in Australia for large scale Android data

harvesting

These are the best Android antivirus apps right now

The cybersecurity firm studied nine dark-web marketplaces between 2019 and 2023 and found a working, but expensive, method of getting malware to the
Play Store on offer.

Its called a loader - a mobile app that looks legitimate, but will at one point try to install an update that is malicious. The app might even work as advertised in the beginning, until at one point, it will no longer function until its updated, or otherwise force the victim to update another way.

These loaders can be purchased on the dark web, ranging from $2,000, to $20,000. The price depends on the features the loader has. A user-friendly UI design, a convenient control panel, victim country filter, support for newer versions of Android, and similar, all dictate the price, Kaspersky says.

"Cybercriminals may also supplement the trojanized app with functionality for detecting a debugger or sandbox environment," the researchers added. "If a suspicious environment is detected, the loader may stop its operations, or notify the cybercriminal that it has likely been discovered by security investigators." Here are the best endpoint protection tools right now



======================================================================
Link to news story: https://www.techradar.com/news/cybercriminals-can-pay-dollar20k-to-spread-malw are-on-the-google-play-store


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)