Figure of the day:
2 800 000
So many times have been downloaded malicious fake Minecraft from Google Play.
Experts antivirus company ESET detected in Google Play more than 30 false application that simulates the game of Minecraft or cheat program to it. Fakes have been downloaded 2.8 million times.
In 2011, Google introduced the app store with a special protective service Bouncer, which allowed a 40% reduction in the volume of malware. In March 2015, the company announced that a downloadable application will be reviewed with the involvement of the human resource. However, the disclosed ESET fraudulent campaign proved that efforts are not enough.
The first counterfeits of Minecraft have been loaded into the store in August 2014. Since the publication they received low user ratings and negative comments. However, according to statistics from Google Play, some of them were downloaded from 100 to 500 thousand times. Only after contacting representatives ESET malware in Google apps have been removed from the store.
All malicious apps discovered by experts showed a similar behavior. They differ only in name and design of the icons, which correspond to their counterparts in Minecraft. Fakes uploaded to Google Play with different accounts, but experts believe that their development is one and the same person or group of persons.
After a false start Minecraft its start screen consists almost entirely of advertising banners. The language of the text is adjusted depending on the user’s location. ESET experts say that this approach is often used in a different family of malware – encoders designed for extortion.
Any attempt to communicate with the application displays a pop-up window that warns the user about the “dangerous virus infection”. Clicking on the banner takes the user to a website that mimics a legitimate site anti-virus company. There they are prompted to activate via SMS antivirus solution price of 4.80 euros per week.
In the end, the malicious app creates a special SMS message. The user is prompted to enable protection anti-virus by sending SMS. After that, the victim will be signed on a paid newsletter.