Android barcode scanner with 10 million+ downloads infects users

Enlarge (credit: portal gda / Flickr)

A benign barcode scanner with more than 10 million downloads from Google Play has been caught receiving an upgrade that turned it to the dark side, prompting the search-and-advertising giant to remove it.

Barcode Scanner, one of dozens of such apps available in the official Google app repository, began its life as a legitimate offering. Then in late December, researchers with security firm Malwarebytes began receiving messages from customers complaining that ads were opening out of nowhere on their default browser.

One update is all it takes

Malwarebytes mobile malware researcher Nathan Collier was at first puzzled. None of the customers had recently installed any apps, and all the apps they had already installed came from Play, a market that despite its long history of admitting malicious apps remains safer than most third-party sites. Eventually, Collier identified the culprit as the Barcode Scanner. The researcher said an update delivered in December included code that was responsible for the bombardment of ads.

Read 8 remaining paragraphs | Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

Translate »
Legal Notice: Views expressed in articles published in www.ebusinessbrief.com are those of the authors and www.ebusinessbrief.com or its owners take no responsibility regarding the same. Advertisements in www.ebusinessbrief.com are published for information of the subscribers. www.ebusinessbrief.com does not authenticate, endorse or guarantee any of the products or services or claims made by the Advertisers. Readers are advised to themselves verify the details. No part of this publication may be reproduced by any means without prior written permission from the Editor. Permission is normally granted wherever sufficient acknowledgement is given to www.ebusinessbrief.com.