#HOW PRISMA APP MAKES MONEY UPDATE#
Displaying a fake request to update the device’s operating system to Android 6.0, users are lured into entering their Google account credentials into the fake login form.īecause of Prisma’s success on the iOS platform, it was clear that this app would be eagerly awaited by Android users. However, downloaded modules may have had different functionality implemented.Īmong the five trojan downloaders discovered on Google Play, two have phishing functionality implemented that could probably be executed via the downloaded module. When we replicated this infiltration, the trojan downloaded and executed an additional module stealing sensitive information such as phone number, operator name, country name, language and so on.
#HOW PRISMA APP MAKES MONEY DOWNLOAD#
They would send device information to the C&C server and on request, download additional modules and execute them. Contrary to their counterparts with their annoying ads and surveys, these trojans work behind the scenes hiding their icons from the device. The most dangerous fake Prisma apps found on Google Play before the (genuine) Prisma app release were the trojan downloaders detected by ESET as Android/. Some actually had very basic photo editing functionality but mainly served the user a stream of pop-up ads or displayed scareware activity to persuade the user the device was infected with malware.įigure 1: Scareware activity displayed after launch Most of the fake Prisma apps found on Google Play didn’t have any photo editing functionality instead they only displayed ads or fake surveys, luring users into providing their personal information or subscribing to bogus (and costly) SMS services. Android users were eager for it and many couldn’t wait to see it on Google Play where Prisma’s release was scheduled for July 24 th, 2016.Īs with many other popular apps on Google Play in the past, fake versions flooded the store before the official release date, riding the wave of user impatience. First released for iOS, it received excellent ratings among users on iTunes, the Apple app store.
Prisma is a unique photo editor released by Prisma labs, Inc. Prior to that point, Prisma copycats reached over 1.5 million downloads by fans. The Google Play security team removed them from the official Android store at ESET’s notice.
The Google Play security team has since removed them.īefore the release of the Android version of Prisma, a popular photo transformation app, fake Prisma apps flooded the Google Play Store.ĮSET researchers discovered fake Prisma apps of different types, including several dangerous trojan downloaders.
ESET researchers have discovered fake Prisma apps of different types, including several dangerous trojan downloaders.
0 kommentar(er)
