elaborating on their discovery, the researchers mentioned that they noticed two camera applications on Android with malicious behavior. They have identified these apps as ‘Sun Pro Beauty Camera’ with over a million downloads, and ‘Funny Sweet Beauty Selfie Camera’ with over 500,000 downloads.
While testing the apps on a Android 5.1.1 device, the researchers noticed that both the apps barraged users with ads. Following the installation process, the apps would create a shortcut and remove themselves from the app drawer. Then, these apps would show full-screen ads on the device’s screen. A user could not get rid of these ads as the apps continued to run actively in the background even after uninstalling the shortcut.
Apart from delivering adware, both the Android apps demanded unnecessary device permissions. Specifically, the Sun Pro Beauty Camera asked permission to record audio without user consent, create a shortcut (stealth behavior), and trick users by overlapping data via system alert windows. Whereas, Funny Sweet Beauty Camera sought permissions to record audio without consent at any time, activate app after device boot, and overlap other apps by displaying system alert windows.
However, since both the apps seemed to have a huge userbase (despite negative reviews), it is possible that apps could still be running on many devices. Therefore, the users of any of these apps must ensure removing these apps from their system. They might even need to factory reset their phones to do so. Yet, it is still better than continuing to be a victim of malware attack.
Let us know your thoughts in the comments.
