Notebookcheck

The "Joker" malware is found to exist within yet another Android app

The Int App Lock icon alongside some code it reportedly runs. (Source: Pradeo Lab)
The Int App Lock icon alongside some code it reportedly runs. (Source: Pradeo Lab)
"Joker" is a relatively new form of malware that reportedly acts to steal contacts and sign those with infected devices up for premium SMS services. Most recently, it has been detected in a heretofore-overlooked host on Android by the Pradeo security team. This lab has had the app removed from the Google Play Store, but potentially affected users are advised to uninstall it immediately.

Joker malware is a form of Trojan that reportedly downloads a secured configuration from a command-and-control (C&C) server in a manner masked by the installation of an infected app. The hidden software then installs a follow-up component that steals SMS details under the guise of the host's interaction with ad websites.

The aim of this infiltration appears to involve gaining the access necessary so as to allow automatic sign-ups to premium SMS services. Joker also reportedly steals contacts and text messages. It had been found on a rash of Android apps back in September 2019, but not been heard of since. Unfortunately, this may no longer be the case.

Int App Lock had been marketed as a per-app PIN-setting service for Android. The security group Pradeo Lab claims to have found Joker on this app. Luckily, the organization has contacted Google about this issue, which led to the app's suspension from the Play Store. However, users who still have the offending software installed are best off removing it without delay.

Working For Notebookcheck

Are you a techie who knows how to write? Then join our Team! Especially English native speakers welcome!

Currently wanted: 
News and Editorial Editor - Details here

Source(s)

static version load dynamic
Loading Comments
Comment on this article
Please share our article, every link counts!
> Notebook / Laptop Reviews and News > News > News Archive > Newsarchive 2019 10 > The "Joker" malware is found to exist within yet another Android app
Deirdre O Donnell, 2019-10-23 (Update: 2019-10-23)