Aviran Hazum

"The victims thought they were downloading an innocuous utility app from the official Android market, but what they were really getting was a trojan coming straight for their financial accounts" Aviran Hazum Hacker manipulated readily available 3rd party resources – Firebase and Github -- to evade detection by Google Play Protect Second stage malware triggered by Clast82 can bypass two-factor authentication on financial accounts, and give full control over a victim’s phone, as if the hacker...

By Aviran Hazum, Bogdan Melnykov, and Israel Wernik, Check Point Check Point’s researchers recently discovered a new variant of the Joker Dropper and Premium Dialer spyware in Google Play. Hiding in seemingly legitimate applications, we found that this updated version of Joker was able to download additional malware to the device, which subscribes the user to premium services without their knowledge or consent.