Yet another spyware was discovered on Android, and this one had a huge reach. The so-called ‘SpinOk’ spyware was included in Android apps that were installed 421 million times, Dr.Web reports.
‘SpinOk’ malware found in 101 Android apps which were installed 421 million times
SpinOk spyware module “collects information on files stored on devices and is capable of transferring them to malicious actors”. On top of that, this spyware is capable of substituting and uploading clipboard content to a remote server.
Needless to say, this is worrying, to say the least. This spyware is distributed as a marketing SDK. Developers can embed it in various apps and games, including those available in the Google Play Store.
SpinOk, on the surface, is made so that it keeps users interested in apps via mini games, system tasks, alleged prizes, and reward drawings. Once initialized, this trojan SDK connects to a C&C server, and sends a ton of data.
It shares data from sensors, first and foremost, which can, ultimately, adjust the module’s operating routine in order to avoid being detected by security researchers. It also ignores the device’s proxy settings.
This trojan SDK expands the capability of JavaScript code executed on webpages
This trojan SDK is also capable of expanding the capabilities of JavaScript code executed on loaded webpages containing ads. It can ultimately obtain the list of files in specified directories, obtain a specific file from the device, get clipboard info, and more.
Dr.Web discovered this malware in 101 apps, and those apps were collectively installed 421,290,300 times. Needless to say, that placed a ton of Android users at risk.
Below is a list of the 10 most popular Android apps to carry SpinOk spyware, while you can access the full list by clicking here.
- Noizz: video editor with music (at least 100,000,000 installations)
- Zapya – File Transfer, Share (at least 100,000,000 installations; the trojan module was present in version 6.3.3 to version 6.4 and is no longer present in current version 6.4.1)
- VFly: video editor&video maker (at least 50,000,000 installations)
- MVBit – MV video status maker (at least 50,000,000 installations)
- Biugo – video maker&video editor (at least 50,000,000 installations)
- Crazy Drop (at least 10,000,000 installations)
- Cashzine – Earn money reward (at least 10,000,000 installations)
- Fizzo Novel – Reading Offline (at least 10,000,000 installations)
- CashEM: Get Rewards (at least 5,000,000 installations)
- Tick: watch to earn (at least 5,000,000 installations)
2023-06-01 15:13:39