{"id":11656,"date":"2018-03-05T11:10:01","date_gmt":"2018-03-05T19:10:01","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/03\/05\/news-5427\/"},"modified":"2018-03-05T11:10:01","modified_gmt":"2018-03-05T19:10:01","slug":"news-5427","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2018\/03\/05\/news-5427\/","title":{"rendered":"Mobile Menace Monday: Olympics app has more ads than games"},"content":{"rendered":"<p><strong>Credit to Author: Nathan Collier| Date: Mon, 05 Mar 2018 18:00:00 +0000<\/strong><\/p>\n<p>An app claiming to live stream the 2018 Winter Olympics (but really serving up a blizzard of ads) had a short run on Google Play. It was uploaded to the Play store on February 8, 2018. Since then, it&#8217;s been removed. The last known existence of it on the store was a cached snapshot from February 10.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"21853\" data-permalink=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/03\/mobile-menace-monday-olympics-app-has-more-ads-than-games\/attachment\/webpage-2\/\" data-orig-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/webpage.png\" data-orig-size=\"1080,1920\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"webpage\" data-image-description=\"\" data-medium-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/webpage-169x300.png\" data-large-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/webpage-338x600.png\" class=\"aligncenter wp-image-21853 size-large\" src=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/webpage-338x600.png\" alt=\"\" width=\"338\" height=\"600\" srcset=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/webpage-338x600.png 338w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/webpage-169x300.png 169w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/webpage.png 1080w\" sizes=\"auto, (max-width: 338px) 100vw, 338px\" \/><\/p>\n<h3>Poorly-made app<\/h3>\n<p>At first, things seem normal with a simple opening screen.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"21851\" data-permalink=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/03\/mobile-menace-monday-olympics-app-has-more-ads-than-games\/attachment\/app1-2\/\" data-orig-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app1.png\" data-orig-size=\"1080,1920\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"app1\" data-image-description=\"\" data-medium-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app1-169x300.png\" data-large-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app1-338x600.png\" class=\"aligncenter wp-image-21851 size-medium\" src=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app1-169x300.png\" alt=\"\" width=\"169\" height=\"300\" srcset=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app1-169x300.png 169w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app1-338x600.png 338w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app1.png 1080w\" sizes=\"auto, (max-width: 169px) 100vw, 169px\" \/><\/p>\n<p>After displaying the first ad, it goes onto a navigation screen.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"21852\" data-permalink=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/03\/mobile-menace-monday-olympics-app-has-more-ads-than-games\/attachment\/app2-2\/\" data-orig-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app2.png\" data-orig-size=\"1080,1920\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"app2\" data-image-description=\"\" data-medium-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app2-169x300.png\" data-large-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app2-338x600.png\" class=\"aligncenter wp-image-21852 size-medium\" src=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app2-169x300.png\" alt=\"\" width=\"169\" height=\"300\" srcset=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app2-169x300.png 169w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app2-338x600.png 338w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/app2.png 1080w\" sizes=\"auto, (max-width: 169px) 100vw, 169px\" \/><\/p>\n<p>Click on each live stream link, and it\u2019s a gamble whether it actually redirects to a functioning live stream or not. I found that most of the time, the app crashed. In contrast, the app&#8217;s ability to display ads never falters.<\/p>\n<p> <a href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/03\/mobile-menace-monday-olympics-app-has-more-ads-than-games\/#gallery-21847-1-slideshow\">Click to view slideshow.<\/a> <\/p>\n<h3>More ads than games<\/h3>\n<p>An app <a href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2017\/10\/mobile-menace-monday-despicable-adware\/\" target=\"_blank\" rel=\"noopener\">serving up ads<\/a> in order to use it for free is nothing new, and most of us humbly accept. The decision for mobile malware researchers to classify some of these apps as adware isn\u2019t always easy. In this case, the Olympic streaming app doesn\u2019t use anything unusual to serve ads. To put it another way, it isn\u2019t using any known aggressive Ad SDKs. However, when these ads pop up after every click, it&#8217;s excessive.<\/p>\n<p>It\u2019s clear that the true intent here is not to live stream the Olympics, but to serve up as many ads as possible before the app crashes. Thus, we gave this failed app a classification of Android\/Adware.LiveStream.<\/p>\n<h3>Combing through Google Play<\/h3>\n<p>The sheer number of apps like these found on Google Play that teeter on the line between clean or adware is overwhelming.\u00a0<a href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2017\/10\/yet-more-mobile-adware-found-in-google-play\/\" target=\"_blank\" rel=\"noopener\">As we have found<\/a> time and time again, it\u2019s impossible for Google Play to catch all of these. This is true even with Google\u2019s more advanced <a href=\"https:\/\/www.android.com\/play-protect\/\" target=\"_blank\" rel=\"noopener\">Play Protect<\/a> feature.<\/p>\n<p>Moreover, it\u2019s impossible for mobile malware researchers to keep up with all these \u201cgrey\u201d apps as well. This is especially true with special cases like these, where detailed analysis is needed to make a determination. It\u2019s important to note that even if apps like these do slip through, they are generally low risk.<\/p>\n<h3>User responsibility: tips to stay safe<\/h3>\n<p>Due to the overwhelming number of questionable apps on Google Play, some responsibility to pick safe apps must fall on users. Here are some tips to stay safe.<\/p>\n<h4>Check the details<\/h4>\n<p>Before installing an app, check the app\u2019s details page for evidence of anything out of the ordinary. Things to look for are the app\u2019s reviews, number of installs, and the last update. If there are a low number of reviews and\/or the app has poor reviews, be wary. The same goes for a low number of installs of the app.<\/p>\n<p>Lastly, if the app was recently updated, this could indicate that it was also recently uploaded to Google Play\u2014which isn&#8217;t necessarily a bad thing, but it does make it harder to vet the app&#8217;s security. Unfortunately, Google Play doesn\u2019t display when the app was first uploaded, so the updated date is the best data you have to determine whether it&#8217;s new or not.<\/p>\n<p>If, after all this, you decide to install the app and it contains what you think is adware, no need to panic. Most of these grey apps just display annoying ads, and there is no other harm. Simply uninstall and go on with your day.<\/p>\n<h3>APK Samples<\/h3>\n<p>MD5: 9338E7E6D378DE01C14DB939D51B1D11<\/p>\n<p>Package Name: com.ww2018OLYMPICLIVETV_6516426<\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/03\/mobile-menace-monday-olympics-app-has-more-ads-than-games\/\">Mobile Menace Monday: Olympics app has more ads than games<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/03\/mobile-menace-monday-olympics-app-has-more-ads-than-games\/\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Nathan Collier| Date: Mon, 05 Mar 2018 18:00:00 +0000<\/strong><\/p>\n<table cellpadding='10'>\n<tr>\n<td valign='top' align='center'><a href='https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/03\/mobile-menace-monday-olympics-app-has-more-ads-than-games\/' title='Mobile Menace Monday: Olympics app has more ads than games'><img src='https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/02\/shutterstock_598488413.jpg' border='0'  width='300px'  \/><\/a><\/td>\n<\/tr>\n<tr>\n<td valign='top' align='left'>An app claiming to live stream the 2018 Winter Olympics had a short run on Google Play before being flagged for adware.<\/p>\n<p>Categories: <\/p>\n<ul class=\"post-categories\">\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/cybercrime\/\" rel=\"category tag\">Cybercrime<\/a><\/li>\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/cybercrime\/mobile\/\" rel=\"category tag\">Mobile<\/a><\/li>\n<\/ul>\n<p>Tags: <a href=\"https:\/\/blog.malwarebytes.com\/tag\/adware\/\" rel=\"tag\">adware<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/android\/\" rel=\"tag\">Android<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/mobile-ads\/\" rel=\"tag\">mobile ads<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/olympics\/\" rel=\"tag\">olympics<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/triple-m\/\" rel=\"tag\">triple m<\/a><\/p>\n<table width='100%'>\n<tr>\n<td align=right>\n<p><b>(<a href='https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/03\/mobile-menace-monday-olympics-app-has-more-ads-than-games\/' title='Mobile Menace Monday: Olympics app has more ads than games'>Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/03\/mobile-menace-monday-olympics-app-has-more-ads-than-games\/\">Mobile Menace Monday: Olympics app has more ads than games<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[10468,10462,4503,10554,17703,5858,10556],"class_list":["post-11656","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-adware","tag-android","tag-cybercrime","tag-mobile","tag-mobile-ads","tag-olympics","tag-triple-m"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/11656","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=11656"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/11656\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=11656"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=11656"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=11656"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}