Is the Google Play Store Safe? Not Yet.

By : Krishna Anindyo | Tuesday, February 25 2020 - 13:05 IWST

Google Play Store (Images by Brands of the World)
Google Play Store (Images by Brands of the World) - Over recent years, there has been a lot of activity on Google’s part to improve the security of its Google Play app store. Why? Because millions of users have inadvertently downloaded thousands of malicious applications from the store which have compromised their data including SMS, credentials, photos, calendars appointments, and emails.

For example, in March 2019, the ‘SimBad’ adware was found in over 200 apps on the store, with a combined download count of nearly 150 million.  

Since the formal formation of the alliance, over 5.2 million installations of malicious apps took place, spanning dozens of different campaigns of four different types of malware. These malware families have a range of capabilities from the ability to steal all information from the device, to taking over the device by popping up advertisements or overlay windows as a form of a phishing attack.

These apps also use a variety of techniques to avoid detection by the alliance’s security teams, including code obfuscation and delayed downloads of malicious payloads. 

One of these campaigns has been uncovered by Check Point researchers. The Haken malware family was installed on over 50,000 Android devices by eight different malicious apps which all appeared to be benign. The apps were mostly camera utilities and children’s games  the apps were Kids Colouring, Compass, QR code, Fruits colouring book, soccer colouring book, fruit jump tower, ball number shooter & Inongdan.

The malware is classified as a “clicker” because of its ability to take control of the user device and click on anything that may appear on the device’s screen. It is important to note that malware can access any type of data, so anything visible on-screen is fair game Hello, work emails!, and any locally stored data.

The impact on users is two-fold:  it can sign them up for premium subscription services without the user realising, earning money illegally for the people behind the app. It could also exfiltrate sensitive data from the user’s device. The good news is, these rogue applications have all been removed from Google Play.

But this does highlight that despite ongoing efforts to secure the Google Play Store against malicious apps, completely eliminating the risk of users getting a malicious download from the store is not going to happen quickly. There are nearly 3 million apps available from the store, with hundreds of new apps being uploaded daily – which makes it difficult to check every single app is safe.

Some app developers have devised ingenious methods to conceal their apps' true intent from Google’s scrutiny. Coupled with a fragmented Android ecosystem, in which a large number of device manufacturers infrequently offer critical OS updates, users cannot rely on Google Play’s security measures alone to ensure their devices are protected. 

They need to deploy security software to ward off malware and other threats, and protect the corporate and personal data on those devices. The security solution has to truly understand malicious behaviour which means it must use numerous advanced techniques that go beyond just signatures or machine-learning based on static indicators.

News Comment

Today's Industry

World Bank Group (Images by ITU)

Kamis, 05 Maret 2020 - 07:23 WIB

World Bank Group Announces Up to $12 Billion Immediate Support for Covid-19 Country Response

As Covid-19 reaches more than 60 countries, the World Bank Group is making available an initial package of up to $12 billion in immediate support to assist countries coping with the health and…

Association of International Certified Professional Accountants (Images by Irish Times Executive Jobs)

Rabu, 26 Februari 2020 - 12:48 WIB

Global Accounting Leaders Call on Profession to Help Address Climate Change

As part of The Prince’s Accounting for Sustainability Project (A4S) Accounting Bodies Network, which collectively represents over 2.5 million accountants and students worldwide, 14 major accounting…

Check Point Software Technologies (Images by Acclaim)

Rabu, 26 Februari 2020 - 12:21 WIB

Check Point Software Technologies Recognised as a Microsoft Security Partner Award Winner

At the inaugural Microsoft Security 20/20 partner awards, held February 23, Microsoft announced award winners in 16 categories that span security integration partners, system integrators and…

HackerOne (Images by Tekno

Selasa, 25 Februari 2020 - 16:00 WIB

Hacking as a Career Soars in Popularity According to HackerOne’s 2020 Hacker Report

HackerOne, hacker-powered pen-test & bug bounty platform, today announced findings from the 2020 Hacker Report, which reveals that the concept of hacking as a viable career has become a reality,…

Cyber Attack (Images by IDN Times Jabar)

Jumat, 21 Februari 2020 - 09:09 WIB

Cyber Attack Fears are Delaying Business Innovation

Survey conducted by bug bounty and pentesting platform, HackerOne, has revealed that IT projects are being stifled due to security concerns. More than 80% of UK CISOs and CTOs who were interviewed…