Notebookcheck Logo

Joker malware discovered in multiple apps with thousands of installs on the Google Play Store

The Joker malware can obtain SMS management information that leads to unwanted premium SMS subscription signups. (Image source: Unsplash - edited)
The Joker malware can obtain SMS management information that leads to unwanted premium SMS subscription signups. (Image source: Unsplash - edited)
More than a dozen apps have been highlighted by a malware analyst because they have been infected by the notorious Joker software. Installing Joker can lead the user to being subscribed to services they do not require, incurring a loss of income. One of the infected apps, EmojiOneKeyboard, has already registered over 50,000 installs.
Security Software Smartphone Android

A malware analyst for Kaspersky, Tatyana Shishkova, has been tracking the appearance of Joker malware on numerous apps that have been available at some point on the Google Play Store. While some of the apps have registered barely any installs, quite a few have had thousands of downloads. The Joker malware has made numerous appearances over the years, with our last report on it detailing how it can access contacts and SMS messages without user permission.

More than a dozen apps have now been reported in association with the Joker malware, so if your device features any of these programs you should delete them and make sure you scan your phone for any kind of infection or corrupt software:

  • EmojiOne Keyboard (50,000+ installs)
  • Now QRcode Scan (10,000+ installs)
  • Classic Emoji Keyboard (5,000+ installs)
  • Super Hero-Effect (5,000+ installs)
  • Blender Photo Editor-Easy Photo Background Editor (5,000+ installs)
  • Battery Charging Animations Battery Wallpaper (1,000+ installs)
  • Smart TV Remote (1,000+ installs)
  • Volume Booster Louder Sound Equalizer (100+ installs)
  • Easy PDF Scanner (10+ installs)
  • Volume Booster Hearing Aid (10+ installs)
  • Battery Charging Animation Bubble Effects (10+ installs)
  • Dazzling Keyboard (10+ installs)
  • Flashlight Flash Alert on Call (1+ install)
  • Halloween Coloring (1+ install)

These are just the most recent additions to Shishkova’s list, which can be checked via her Twitter feed. Many other apps infected by Joker malware have also been listed going back many months. Some of these also have multiple thousands of installs, so users should make sure that none of the affected apps currently reside on their smartphone.

Buy Kaspersky Internet Security 2022 on Amazon

Source(s)

@sh1shk0va

Related Articles

The Kids section in Google Play (Image source: Own)
Google pulls the plug on the Play Security Reward Program 08/20/2024
An Android trojan resurface by piggybacking on apps available on Google Play. (Image via Android w/ edits)
Anatsa malware targeting European Android users via apps on Google Play app store 02/19/2024
Scams and crypto-malware are more rampant than ever. (Image Source: Comodo cWatch)
New Mars Stealer malware targets Chrome-based browser crypto wallets 02/04/2022
Bad actors were previously able to take advantage of a vulnerability in AppX installer that allowed them to spread malware. (Image: RoonZ.nl via Unsplash)
Microsoft patches spoofing vulnerability that was exploited to spread malware 12/16/2021
Los estafadores aprovechan el pánico a la variante Omicron de COVID-19 para difundir correos electrónicos de phishing. (Imagen: Lifewire)
Los estafadores envían correos electrónicos de phishing basados en la variante Omicron de COVID-19 12/07/2021
Scammers use the panic about the Omicron variant of COVID-19 to spread phishing emails. (Image: Lifewire)
Scammers send phishing emails based on the Omicron variant of COVID-19 12/06/2021
Google is rolling out several new features across Android devices. (Image source: Google)
Google announces a December 2021 Feature Drop for Android devices 12/02/2021
Intel 8th generation processor wafer (Source: Intel)
Two high-rated security issues have been confirmed by Intel for a few processor series 11/15/2021
The newly discovered malware puts millions of IoT devices at risk (Image source: Packetlabs)
Open source Botenago malware could potentially affect millions of routers and IoT devices 11/13/2021
Robinhood suffers security breach exposing details of millions of customers.
Robinhood, the popular no-fee trading app, suffers a security breach exposing details of millions of customers 11/09/2021
The Discord CDN network is apparently being abused to send malware masquerading as images, video, or text (Image source: Discord)
Hackers are using Discord to send malware and remote-access trojans, putting millions of users at risk 10/30/2021
Routers with security vulnerabilities are the perfect gateway for malware (Image: Stephen Phillips)
Microsoft went from door to door to take malware-infected routers offline 07/20/2021
The fake System Upate app's on-screen presence. (Source: Zimperium)
An Android app calling itself "System Update" is unmasked as malware by a security company 03/28/2021
The first Apple M1-native running malware has been discovered. (Image source: Apple/PCRisk - edited)
Apple M1-native malware targets users of the new MacBook Pro, MacBook Air, and Mac Mini with unwanted Pirrit adware 02/18/2021
More vulnerabilities have been uncovered in Intel's silicon. (Image: Intel)
Another month, another Intel chipset malware vulnerability 06/10/2020
The Int App Lock icon alongside some code it reportedly runs. (Source: Pradeo Lab)
The "Joker" malware is found to exist within yet another Android app 10/23/2019
Read all 1 comments / answer
static version load dynamic
Loading Comments
Comment on this article
Windows 11 to get snappier and more...
Seiko WristMac: Macintosh-compatibl...
Please share our article, every link counts!
Mail Logo
> Expert Reviews and News on Laptops, Smartphones and Tech Innovations > News > News Archive > Newsarchive 2021 11 > Joker malware discovered in multiple apps with thousands of installs on the Google Play Store
Daniel R Deakin, 2021-11-23 (Update: 2021-11-23)