{"id":12637,"date":"2018-06-20T12:10:02","date_gmt":"2018-06-20T20:10:02","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2018\/06\/20\/news-6405\/"},"modified":"2018-06-20T12:10:02","modified_gmt":"2018-06-20T20:10:02","slug":"news-6405","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/06\/20\/news-6405\/","title":{"rendered":"Fake Fortnite for Android links found on YouTube"},"content":{"rendered":"

Credit to Author: Nathan Collier| Date: Wed, 20 Jun 2018 19:00:41 +0000<\/strong><\/p>\n

The extremely popular video game Fortnite<\/a> is coming to Android sometime this summer, and the fanbase is going wild. Not surprisingly, mobile malware developers are taking advantage. Already, there are several videos on YouTube with links claiming to be versions of Fortnite for Android, despite the fact the game has yet to be released on this platform.<\/p>\n

Swati Khandelwal of The Hacker News <\/em>highlights the emerging threat in her article, Epic Games Fortnite for Android\u2013APK Downloads Leads to Malware.<\/a>\u00a0<\/em>Taking it a step further, I grabbed some of these malicious apps and took them for a spin.<\/p>\n

The source of infection<\/h3>\n

The apps are not located on the Google Play Store. Instead, people have found them by searching “How to install Fortnite on Android” or “Fortnite for Android” in Google, or stumbling across links in YouTube ads. From there, the apps can be downloaded.<\/p>\n

My findings for the so-called Fortnite for Android app are that it’s a simple program that comes in two different package names (so far):<\/p>\n

com.anizz14<\/p>\n

com.anizz14.fortnite<\/p>\n

Simple, but malicious nonetheless<\/h3>\n

To make the app look legit, it starts with a realistic-looking icon. As a matter of fact, it’s so realistic that some may recognize it from the Apple iOS version. By stealing the icon directly from Apple, how could it not look real?<\/p>\n

\"\"<\/p>\n

When opening the app, it displays the Epic Games logo to further trick users.<\/p>\n

\"\"<\/p>\n

Next, once again stealing from iOS, a loading screen appears.<\/p>\n

\"iOS<\/p>\n

iOS stolen loading screen<\/p>\n<\/div>\n

After the loading screen, it starts playing the Fortnite intro song and opens a screen that displays “New Updates,” the first indication something might be up.<\/p>\n

\"\"<\/p>\n

By just clicking on the screen, it moves onto a different screen that makes more sense. It states that it’s “Logging In…” and looks very authentic (as well as very stolen).<\/p>\n

\"\"<\/p>\n

The next screen is where things go sideways. It requires a Mobile Verification<\/em>.<\/p>\n

\"\"<\/p>\n

Click “OK” and the app redirects to a website via your default browser. There, it claims to be for the purpose of verifying \u201cYou\u2019r Not A BOT\u201d (bad grammar and all) in order to proceed to Fortnite. To \u201cverify,\u201d the user must complete a task, which involves downloading another “free” app.<\/p>\n

Click to view slideshow.<\/a> <\/p>\n

Click on a link and a pop-up promising “Unlock Instructions” appears.<\/p>\n

\"\"<\/p>\n

Press “Tap to Install” and it redirects you to Google Play\u2014that’s right, a bit of silver lining.\u00a0 The redirect is at least to a legit, safe Google Play version of an app.<\/p>\n

\"\"<\/p>\n

The bad news is that no matter how many apps you download, the game never unlocks\u2014because it never existed within the malicious app in first place.<\/p>\n

Yep, I know this game<\/h3>\n

The scheme goes like this: Get a couple of over-excited people salivating for a chance to play Fortnite on Android, and get paid. The more downloads that come from the website shown above, the more money the malware developers can make. With the app being so simplistic, the amount of development effort is pretty low for the amount that could be potentially gained. Hopefully, we can help stop the revenue stream by detecting this one as Android\/Trojan.FakeFortnite<\/a>.<\/p>\n

\"\"<\/p>\n

Patience is a virtue<\/h3>\n

Every time there is craze around a new video game release, consequently we see malware authors jumping into the game. Often, it\u2019s an attack against our good senses. They capitalize on that little itch that screams \u201cI want it now!\u201d We suggest listening to that other\u00a0inner voice that warns, \u201cThis seems too good to be true.\u201d Our advice: be patient. If you wait for the official release by Epic Games in the Google Play Store this summer, you won’t have the spend the ensuing months cleaning malware off your Android. Stay safe out there!<\/p>\n

The post Fake Fortnite for Android links found on YouTube<\/a> appeared first on Malwarebytes Labs<\/a>.<\/p>\n

https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Nathan Collier| Date: Wed, 20 Jun 2018 19:00:41 +0000<\/strong><\/p>\n\n\n\n
<\/a><\/td>\n<\/tr>\n
The extremely popular video game Fortnite is coming to Android sometime this summer, and the fanbase is going wild. Not surprisingly, mobile malware developers are taking advantage. Already, there are several videos on YouTube with links claiming to be versions of Fortnite for Android. Spoiler alert: they’re fake.<\/p>\n

Categories: <\/p>\n