Malware Discovered Hidden Behind Every Single App On An Android App Store

Cyber security researchers from ESET have discovered that a Turkish alternative to Android’s Google Play Store, Cepkutusu.com, has been spreading malware masquerading as Android apps.

ESET found that when users tried to download any app from Cepkutusu.com they were redirected to a site that downloaded malware disguised in the form of an installer for Adobe Flash Player for Android.

Cepkutusu.com malware

ESET cyber security researcher Peter Stancik noted that the malware did not immediately spring into action.

“Probably to increase their chances to stay under the radar longer, they introduced a seven-day window of not serving malware after a malicious download,” he explained.

“In practice, after the user downloads the infected app, a cookie is set to prevent the malicious system from prevailing, leading to the user being served clean links for the next seven days. After this period passes, the user gets redirected to the malware once they try to download any application from the store.”

However, once the malware does activate is acts as a banking trojan, where it is able to intercemt SMS messages to bypass two-step verification and can install other apps and display fake activity.

Loading ...

Cepkutusu.com was alerted to the malware and has since stopped the malicious activity. Though the source of the malware is not currently known, it  could potentially be an insider attack carried out by a malicious employee at Cepkutusu.com or an external attack using the store as an attack vector.

Of course, there is potential that Cepkutusu.com was set up deliberately to spread malware.

The best way to avoid such malware is to only use apps that are on the official Google Play Store and even then proceed with caution and make use of Google Play Protect security service, as some apps can contain malware than can snake its way on to the Play Store.

Quiz: What do you know about Android?

Roland Moore-Colyer

As News Editor of Silicon UK, Roland keeps a keen eye on the daily tech news coverage for the site, while also focusing on stories around cyber security, public sector IT, innovation, AI, and gadgets.

Recent Posts

Google Fiber Plans US Network Expansion – Report

Google Fiber resurfaces. Network to be expanded to offer speedy internet connectivity to cities in…

14 hours ago

Samsung Unveils Two New Folding Smartphones

Foldable updates from Samsung. include new versions of its pocket sized square (Galaxy Z Flip…

14 hours ago

Elon Musk Sells Tesla Shares Worth $6.9 Billion

Tesla CEO Elon Musk admits he could need the funds if he loses legal showdown…

15 hours ago

Facebook At Centre Of US Teenager Home Abortion Case

Court documents show Facebook provided police in the US state of Nebraska with a teenager's…

17 hours ago

President Biden Signs $53 Billion US Chips Act

President Joe Biden signs landmark bill to encourage chip makers to build more semiconductor manufacturing…

19 hours ago

WhatsApp Update To Allow Users To Leave Groups Silently

Privacy changes to WhatsApp. No more blanket notifications to a group if a user decides…

20 hours ago