In August, the activity of trojans designed to display intrusive ads noticeably increased. They were detected on protected devices 3.8% more often than in the previous month. According to detection statistics collected by Dr.Web anti-virus products for Android, three of the five most widespread malicious apps in August were adware trojans—all from the Android.HiddenAds family. We also saw a surge in the activity of unwanted applications that display ads. They were detected on protected devices 10.57% more often than in July.
Specialized software platforms that allow applications to launch other apps without installing them remain a relevant threat. Malicious actors are often using them in conjunction with the malware they distribute.
The Android.Spy.4498 trojan, which steals information from other apps’ notifications, continues to gradually lose ground against the most popular Android threats. Over the last month, its activity decreased by 29.05%, and it currently accounts for less than a third of all malware detections.
Trojans designed to display intrusive ads. Trojans of this family are often distributed as popular and harmless applications. In some cases, other malware can install them in the system directory. When these trojans infect Android devices, they typically conceal their presence from the user. For example, they “hide” their icons from the home screen menu.
The detection name for various modifications of an application that is designed to record videos and take photos in the background using built-in Android device cameras. It can operate covertly by allowing notifications about ongoing recordings to be disabled. It also allows an app’s icon and name to be replaced with fake ones. This functionality makes this software potentially dangerous.
A commercial spyware app designed to covertly monitor Android device user activity. It allows intruders to read SMS and chats in popular messaging software, listen to the surroundings, track device location and browser history, gain access to a phonebook and contacts, photos and videos, and take screenshots and pictures through a device’s built-in camera. In addition, it has keylogger functionality.
An Android program designed to intercept WhatsApp messages.
A specialized software platform designed to covertly track user location and movement. It can be built into various apps and games.
Program modules incorporated into Android applications. These are designed to display obnoxious ads on Android devices. Depending on the family and modification involved, they can display full-screen ads and block other apps’ windows, show various notifications, create shortcuts, and load websites.