Cyber attackers are once again focusing on Android devices to deceive unsuspecting individuals into divulging personal and financial details.
Users are being advised to promptly uninstall compromised apps linked to a new scam involving sophisticated advertising fraud. By inundating apps with malicious ads, hackers can disrupt the performance of compromised devices while profiting themselves.
The recent assault, named ‘SlopAds’ by the Satori Threat Intelligence and Research Team, impacted 224 Android apps, collectively downloaded more than 38 million times from the Google Play Store.
The team’s security experts uncovered a complex ad fraud and click fraud scheme by threat actors operating SlopAds. These actors manage a set of 224 apps, downloaded over 38 million times worldwide, utilizing steganography techniques and hidden WebViews to direct traffic to their own sites for fraudulent ad impressions and clicks. The operation is themed around AI.
Google has successfully removed all problematic apps to prevent new users from falling victim to ad fraud. Affected users will receive alerts prompting them to delete the apps.
To shield against future attacks, Android users are advised to keep Google’s Play Protect feature enabled in the app store. This feature can identify potentially corrupted apps before installation and block apps demonstrating behavior associated with SlopAds.
Ad fraud not only harms device users but also legitimate advertisers and developers as hackers deceive networks into allowing infected ads. Google defines ad fraud as generating ad interactions to deceive ad networks into believing the traffic is from genuine user interest, leading to invalid traffic.
Android users are urged to act promptly by deleting any flagged infected apps to protect their devices.
