"HUMAN's Satori Threat Intelligence and Research Team has uncovered and disrupted a sophisticated ad fraud and click fraud operation dubbed SlopAds. The threat actors behind SlopAds operate a collection of 224 apps and growing, collectively downloaded from Google Play more than 38 million times across 228 countries and territories. These apps deliver their fraud payload using steganography and create hidden WebViews to navigate to threat actor-owned cashout sites, generating fraudulent ad impressions and clicks."
"Cybercriminals are launching fresh attacks on Android devices in a bid to trick unsuspecting users into handing over their personal and financial information. In this latest assault, users are being advised to delete infected apps immediately to protect themselves from the new scam. The most recent scheme from hackers looking to boost their bank balances involves carrying out an advanced type of advertising fraud."
An operation named SlopAds has infected 224 Android apps, collectively downloaded more than 38 million times across 228 countries and territories. The campaign delivers a fraudulent ad payload using steganography and creates hidden WebViews to navigate to threat actor-owned cashout sites, generating fake ad impressions and clicks. The malicious ads can slow down infected devices while generating revenue for the attackers. The apps and the attackers' infrastructure share an AI theme. Users are advised to delete infected apps immediately to protect personal and financial information. The operation exploits ad networks and hides activity to evade detection.
Read at The Mirror US
Unable to calculate read time
Collection
[
|
...
]