Adult Player Android Porn App Delivers Ransomware

Status
Not open for further replies.
S

sinu

Thread author
A mobile porn app, dubbed “Adult Player,” is on the hunt for ransomware victims.

The app targets users by silently taking photos of them as they use the app. Eventually, the images are displayed on-screen, along with a ransom message demanding payment of $500 USD.

The app is for Android, and is available from non-Google Play sources. Security firm Zscalerdiscovered that once the Adult Player is installed on the user’s device, it shows a fake update that activates the malware in the app.

The malware also loads another APK, named test.apk, from its local storage. It uses a technique referred to as a reflection attack; after this, the phone is in the hands of the ransomware variant.

The malware also sends details on the victim's mobile device and operating system to the remote server.

The ransomware is designed to stay stagnant on screen and does not allow the victim to uninstall it. Rebooting the device doesn’t work either, because the ransomware app becomes active immediately after reboot, which leaves no scope for the victim to get into device "settings" and uninstall the ransomware.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top