Discovered that a total of 89 apps downloaded over 13 million times from Google Play and App Store are related to ad fraud
A security researcher has revealed that 80 applications on Google Play and 9 applications on the App Store are involved in ad fraud. These apps had a total of 13 million installs and deceptively displayed ads to users.
Poseidon's Offspring: Charybdis and Scylla
According to the research team of security company HUMAN, all the apps involved in ad fraud used the same method to display ads fraudulently. On the other hand, it seems that there are many ways to display advertisements. One display method is to obtain information on when a user visits an ad and send that information to the server over and over again, making it appear that the number of visits is higher than it actually is.
Other methods have been observed, such as displaying advertisements on the device's home screen, displaying advertisements in the background, and pretending to be a well-known app to trick advertisers into paying for advertising.
The same threat actor appears to be behind all these ad fraud developers. The HUMAN research team has been aware of this threat since 2019.
In 2019, a research team discovered that more than 40 Android apps were openly committing ad fraud, naming it 'Poseidon' after malicious code in the apps. rice field.
Poseidon used to display advertisements using a mechanism called 'receiver' installed in the terminal. A receiver is a set of code that tells an app when something has changed on the device. It plays a role such as telling the app to stop.
Poseidon exploited this mechanism as a trigger to display advertisements, but its existence was exposed by the research team because it did not hide the code for that.
Poseidon seemed to have disappeared once, but Poseidon's successor appeared from late 2020 to early 2021. Although the mechanism of advertising display is the same as Poseidon, it has evolved by obfuscating the code and targeting specific advertising platforms. The research team succeeded in investigating and exposing this code by naming it Poseidon's daughter `` Charybdis '' after Greek mythology.
And this time, 'Scylla' appeared with further obfuscation and support for iOS applications. Scylla is also one of the gods considered daughters of Poseidon in Greek mythology.
After revealing Scylla, the research team reported to Google and Apple and worked closely with each company to remove all apps from their respective app stores. The research team asked smartphone users to check if the target app was installed and, if so, to remove it immediately.
The OS, SHA-256, application name, and package name of the corresponding application are as follows.
| OS | sha256 hash | Name | Package |
| iOS | n/a | Loot the Castle | com.loot.rcastle.fight.battle (id1602634568) |
| iOS | n/a | Run Bridge | com.run.bridge.race (id1584737005) |
| iOS | n/a | Shining Gun | com.shinning.gun.ios (id1588037078) |
| iOS | n/a | Racing Legend 3D | com.racing.legend.like (id1589579456) |
| iOS | n/a | rope runner | com.rope.runner.family (id1614987707) |
| iOS | n/a | wood sculptor | com.wood.sculptor.cutter (id1603211466) |
| iOS | n/a | Fire-Wall | com.fire.wall.poptit (id1540542924) |
| iOS | n/a | Ninja Critical Hit | wger.ninjacriticalhit.ios (id1514055403) |
| iOS | n/a | n/a | com.TonyRuns.game (n/a) |
| Android | a7fea60c806d2dd10482cd630834373e49b4d944aa19d47091b3bd0a9d7890be | Super Hero-Save the world! | com.asuper.man.playmilk |
| Android | f90565a625044883ec9ce6323e813420412cf5c11e5f48f111dec4e1664cd176 | Arrow Coins | com.arrow.coins.funny |
| Android | 94d10d5839343072aa41bdd61259b580e567e621818686559dffe888dd9337eb | Parking Master | com.ekfnv.docjfltc.parking.master |
| Android | d43ee224e32e7d5d4ab901810afd7148cbf20ad57b07dc193cd154078ce433bb | Lady Run | com.lady.dress.run.sexylady |
| Android | 0fc35fba6a708d5c6ca7da13e294cab70530c63828d9e4dbadf430e5c8f65b4b | Magic Brush 3D | com.magic.brush.gamesly |
| Android | 0efc7c822685ebdf8f4d3d7d3104a957059c432b80624e3de6602c41bc95347f | Shake Shake Sheep | com.shake.earn.sheep.causalgame |
| Android | f0693787bffcde05fe419518621f199765ee802e00be50102c380563db678e9b | Number Combination: Colored Chips | com.yigegame.jyfsmnq.gg |
| Android | fe1d3f3c2ed8858c0327559f66149a4f0b82b01693b296e64448dfcff9d24ae0 | Jackpot Scratcher - Win Real | com.physicswingsstudio.JackpotScratchers |
| Android | 973ffa44c550c25b9ef80e176bb64f170647fd5ee115a3d03b98c88cc9a70a16 | Scratch Carnival | com.scratchers.jackpot.luckypiggy |
| Android | 355a9622553ddbe7bcc78a2a04ce2f5c6067ac07e8f31168e76b884c2403923f | Ztime: Earn cash rewards easily | com.pocky.ztime |
| Android | 4e94ab4fddde2f3f891777d21e4859aaa68dc9366aca82e15418692afb91af36 | Billionaire Scratch | com.free.tickets.scratchers.Billionaire |
| Android | 438e097fa5796400141f6b88b430829c2e3eebda7531e2deec4cf81d0ca15404 | Lucky Wings - Lotto Scratchers | com.free.scratchers.luckywings |
| Android | 420822558735922aee5efd5da2c22ffade14597e3f1d11ebf11ab12f0b3791b7 | Lucky Star: Lotto Scratch | com.free.tickets.scratchers.LuckyLotto |
| Android | 3b1210ec0bd143b3131a04ac23f7d00fa6c1639a4679f2ebd694132145ce65f2 | Shake Shake Pig | com.ldle.merge.free.coinspiggy |
| Android | 6ad0de5604b1f787908fc277780b4d45dbcbfcdd98304b1f4ecf61c12e0fcc95 | Lucky Money Tree | com.ldle.merge.lucky.moneytree |
| Android | 0a201d6da8e7a1b167bda949634d00d389dc995776bad398d0272c27cf85e710 | Run and Dance | com.tap.run.and.dance |
| Android | 539556f6ec50a7be633a1b5c3e30f01ba6520d6c28b1c6a57418636118e7677c | Lucky Scratchers: Lotto Card | com.lotto.bingo.lucky.scratchcard |
| Android | 54c76607362e52798ae7535e8f7ead83474ecb49944e4bfc3f29537eb2e4a40c | pull worm | com.pull.bugs.worm |
| Android | ca0518bb9e77c498a222fdd0d99afc4b56eaa7ed2cf7953711d2a5872cf4e689 | Crowd Battle: Fight the bad guys | com.crowd.battle.goamy |
| Android | ec47369e7557b695784ae4b7bb419cf6d2a4978b53d94f83b3ff50b0f24138db | Shoot Dummy - Win Rewards & Paypal Cash | com.shoot.dummy.fast.speed.linger |
| Android | 4e9fd0291f921711fb19dd21d941a324c72cb77a23a9111c631304d192cea1ca | Spot 10 Differences | com.different.ten.spotgames |
| Android | 2a4934fdb93b410d838f9b70f1d9a0b6a144016a5670cbf3b5df070273ff671f | Find 5 Differences - New | com.find.five.subtle.differences.spot.new |
| Android | 3d67493bfd6eeadffef1d31f0eda3cb2ce11876f5a6458456322d536a0c9e7ff | Dinosaur Legend | com.huluwagames.dinosaur.legend.play |
| Android | 8089bd929512552664daf8f28bee643bb88fbf3ceadc60d0faa439072473f804 | One line drawing | com.one.line.drawing.stroke.yuxi |
| Android | 27d7f05cc02bcfe7b1d5e746c5025b7bffe2534086ca4f0c04336c2d12891283 | Shoot Master | com.shooter.master.bullet.puzzle.huahong |
| Android | 4d1ccfa348c6c20b0291ac3ec2dacca47ed89b14f9d4b8ccde683f368494dc9f | Talent Trap - NEW | com.talent.trap.stop.all |
| Android | b6399d21f7a72f1b0bbc73864c9c228c5a4b8f6331aa5133d56589439f9747e7 | Shoot it: Using Gun | com.bullet.shoot.fight.gtommm.tom |
| Android | d6fc218b1ca0eff4e2ee65dcd2a2b173192d9c0617de5134a150bbf6972e195c | Super Flake | com.chop.slice.flake2020 |
| Android | 0695f9028b1a6038ece961b494971f6762b403952c37b7f95e66112d8fc8027b | Five-Star Slice | com.five.star.slice |
| Android | 1cea4435ead7d166e509f3cc9c9a556383822ca98ee3fdfd48c4c9d683f833d3 | Sand drawing | com.sand.drawing.newfight |
| Android | 21c77771d23805593ff3f637245992376d7dce6fc18de4862973b94c184aa91c | Mr Dinosaur: Play your Dino | com.topggame.facego.finger.crazy.dino |
| Android | abb3ae69fe1f6cf35b54508025c8a6734fe35ded22a6d42bcbcc65aa75bddb3b | Track Sliding New | com.track3d.sliding.new |
| Android | 08aeda329f3e0807625f228db30001ef83ff48fa82962bc50f84f8904a20dafb | Beat Kicker New | com.beat.kicker.two.game |
| Android | d51080d79668b6d4036a7e5ece86389f7f12305b8ca2c379559b764455406180 | Fill Color 3D | com.cube.fill.color.paint.turn.fei |
| Android | 8d5f8dd171fff8dd838871a519ae243c5bb4beeaf904cd365b97a05506aefb8a | Draw Live | com.draw.live.milipop |
| Android | 7bc9e4ebf7ea018d87ac1fb47bdebe3dcf94dd02d0d8fefef902c22166d33493 | Draw 1 Stroke | com.draw.one.line.stroke.xipi |
| Android | 53739fa52192f8493da4a0067ec27c753a017941325f913508a8c8c840b534d9 | Fidget Cubes | com.fidget.cubes.feel.like |
| Android | 4cb13dbb442a0b2c657e5c79a60e856f86e18ee425896b996b9a6452519aca2c | Girls Fight | com.girls.fight.fly |
| Android | ee99a02f917a083348984b29bbfec81ec545bc16d401b391c923db14d546e353 | Ninja Assassin | com.knifeninja.assassin.dltc |
| Android | 69aff645ee74bb7fa0ec4c142a7c5b07fda768742051a05d41ecb5ac456d5d28 | Shooting Puzzle 2020 | com.my.bullet.shooting.man.hunter.youxi |
| Android | 1a23244555d1dbd9ead7019ed07dc6af157e0321e24182c53329be5d734a49ca | Pulley Parkour | com.pul.parkour.bbroller |
| Android | 18ad35cadd4a4a15a40a85ef577645b0ff70199b11b25732e94b403f0063bf23 | Chop Flake 3D | com.slice.chop.superslice3d |
| Android | e8d7baecb47b3a671c99cb0be21cb6b9e3ca4513cff6f02e51ac9d417d88b73b | Weapon Fantasy | com.weapon.fantasy.games |
| Android | 90857e546fc916b77b1c307ad5a8c19ab213bdadd201350d4c7e6a418bde489f | Balloon Shooter | com.balloon.shooter.play |
| Android | 62272f387631a5dc4b5561ad892170f94cb1ebf804a0c863929dae76084e9529 | Musical Shoot | com.ltcmusical.fun2021 |
| Android | f0d976fd5061ca5e5a8982a7f7cfafe472f6570a7de7f752501260599034c744 | Chop Slices | com.lvdiao.chop.slices.chef |
| Android | c5c51f40f5bf4e63795cffd5d2e21ee64c1a586c00249a84ad315b2c7ea30acc | Ninja Slice | com.slice.masked.games |
| Android | c3db0ee64786b4aec5d61c3a993ab25fab2c04d2691ddfe4aae2e0fc87d4952f | Work Now! | com.work.now.slack |
| Android | c4a7057b987ce0daf8e355e801b2ab9386a72eaa80d3592dadfd4c55e5997304 | Bottle Jump | com.bottle.jump.flip.challenge.fun |
| Android | 2b109f567bcd83ab6548add5bbad392f0e5b4e7d3eeedd1363c46bdcc95d8ed3 | Corn Scraper | com.corn.scraper.cut.pipe.siling |
| Android | b9c94a1c06e671600fd4d9dbfc2a7852a3786d10394afbfb477f1b6df7c74952 | Idle Wood Maker | com.idle.wood.maker.gametwo |
| Android | 1a667ba74f9ec4b0d1d36408d8af1ff2493156960134178ff84f4a4d36837c15 | Pop Girls Schooler | com.pop.girls.schooler |
| Android | 2ce1c4dc30313facbdec12030cbd3a94dbc66dbfd2feab7bb231a3bb847b7a86 | Romy Rush | com.romy.rushrun |
| Android | ccecf8310b7d300abe7ff808df4198ed4d0c9e734aaf8c95413d6a67abc4290c | Spear Hero | com.spear.super.man.hero |
| Android | 33472b314c5beb8a0927522e9adf74e38b92ec5638f10d58457072177b926fb1 | Dig Road Balls | com.dig.road.balls.play.games.ygygame |
| Android | 97ed09697b85cf1d58aebc4d8f306c19beff1b949b80682c414f33d902521778 | BOO Popstar | com.boostar.boo.popstar |
| Android | 6687bdee0ecfec779f660327832d17739d95a4dd06536bbb387bd1175d5eb65c | Draw Complete A | com.darwa.completea.ltca |
| Android | 2f949069c0951b7d8203d17d401e0ad5b42e7bb3c0b8c56b4ac5383c3a21c336 | Rush 2048: 3D Shoot Cubes | com.rushcube.puzzle.block |
| Android | 6c00ad91e11ded8b006372d95ab40f0d0769a2fbaaf21909b42bfad147fe74df | Meet Camera | com.magicvcam.hdmeet.cam008 |
| Android | f7f55f024a5c3e5b18cde924ce25f72aab4523a148c24f0d9eea5d2581caa470 | Auto Stamp Camera | com.stac.amper.qweaf |
| Android | 028dfbf91b3b54425ddb6445e2ec3ed01e1f5f736c6821447b67816148a3f6fe | n/a | com.find.five.differences.lvye.xsl |
| Android | d45b38198005b9de44994347e9d40ad822abaa969c3a53ec63cc31adcfb9772d | n/a | com.mufc.zwxfb |
| Android | 67971ff706a897fdca3487bc5782a3813a3d3d2b4261524cc214f1f5b6ffdf27 | roll turn | com.roll.turn.song.wusi.pt |
| Android | 572cc347cbcdbcf0f09470d22215f6791512ca0e74434e357c967e7515d9c2f8 | Hiding Draw | com.hiding.drawltc.games |
| Android | fe8761e1be482bcea96d0edad74af19c6ce6ad85fe88178ff8343f0df61a1ccc | Peter Shoot | com.ltc.peter.shoot.tslgame |
| Android | e0c1774a83eda1420d5798a231592afdb8844ae7c0a2614142290d384327df63 | Design n Road | com.ltcdesign.nroad |
| Android | 5773e83f37ba16600f3e71bc5956d56be3a6c013e95f1c216bbf41eb8acf9be5 | Draw Complete | com.ltcdraw.complete.fly |
| Android | 0f1216681cca2781e73b50fbeb96bbe55a483aef79f2f5109e5776067a645fa4 | Thief King | com.ltcking.thief.game.tsl |
| Android | 96c35c5887b4a11a11590e9bba39771098ad83946eb0387cc52391b808191aaa | Downhill Race | com.downhill.race.redbull |
| Android | 3c82a1c3fa04bbd4cb8b77f1ee5fe905b4a94d2e63f80a5ae19ecd71e9d0e920 | Draw a War | com.draw.war.army |
| Android | b18072fb8f54e020e028cdd10fb5304ab55328c90c599fc2528d3e2b2713ccf8 | Rescue Master | com.rescue.master.gear.mechanics.wushi |
| Android | e16dbfa2f712f8ccf36c07c5015142e0d63db0aec12d6efe656ce83ae285b8da | Spin: Letter Roll | come. letter. roll. race |
| Android | a65f2902fd3c067432804fd03b2c24de85af88a1f22596a1a3da65eb26cb716d | Helicopter Attack - NEW | com.helicopter.attack.shoot.sanba |
| Android | d40968b523ee99a78d752711e677bafa5a872f17d963640a4fac9418cca50ceb | Crush Car | com.crush.car.fly.delivery.lingjiu |
| Android | 577f0644f9cd0849e51a6f5c0dadd7bafcc11b29b6353d97ffa039f3835747a6 | Relx cash | com.tycmrelx.cash |
| Android | ec41dce767a5f49bbe1191f127f2f2c5a6a6345650b51a53795e273504062674 | War in Painting | com.painting.war.inpaper |
| Android | 17aa73a2c3967efd6b11b8c59cf51fcab839169b2281c7f435b2cca5e8ab1ab5 | Bike Extreme Racing | com.bike.extreme.raceing.bikegames |
| Android | 576e5381142a2fe7fa8279d2a8d7fd4123adb7ae885029dca1bc5050ada2da0b | Player Spiral Maker 3D | com.player.spiral.maker.d3 |
| Android | 6d6a8f797415a26f51e1a5ba1de7c75cddd3b5a5a5c5148590355bf62f84b0be | Match 3 Tiles | com.blocks.tile.matching |
| Android | f9932711ca68d431824fa1557a333176e97faf529b1edde6bd7c0e8e2b614114 | 2048 Merge Cube - Win Cash | com.cube.merge.shooter |
Related Posts:
