“BadNews” Android Malware Detected In Google Play

Mobile Security Company, Lookout discovered a new malware in 32 apps published by four different developers in Google Play market. More than half of these applications are Russian. BadNews is designed to create SMS fraud in Russian Federation and neighboring countries like Belarus, Ukraine, Kazakhstan and Armenia.

According to Marc Rogers, Principal Security Researcher at Lookout, “BadNews has the ability to send fake news messages, prompt users to install applications and sends sensitive information such as the phone number and device ID to its Command and Control (C&C) server. BadNews uses its ability to display fake news messages in order to push out other types of monetization malware and promote affiliated apps.”

According to Google Play statistics, the combined affected applications have been downloaded between 2,000,000 – 9,000,000 times. Lookout notified Google about the malware and they promptly removed all apps.

Lookout stated that all its users are protected against this threat. For future protection, Roger suggested the user to install security apps like Lookout Security and Antivirus and advised user to make sure that Android isn’t allowed to download apps from “Unknown Sources”.

Photo courtesy: Lookout