{"id":8051,"date":"2017-06-26T08:10:39","date_gmt":"2017-06-26T16:10:39","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/06\/26\/news-1828\/"},"modified":"2017-06-26T08:10:39","modified_gmt":"2017-06-26T16:10:39","slug":"news-1828","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2017\/06\/26\/news-1828\/","title":{"rendered":"Mobile Menace Monday: Fake WannaCry Scanner"},"content":{"rendered":"

Credit to Author: Nathan Collier| Date: Mon, 26 Jun 2017 15:00:18 +0000<\/strong><\/p>\n

With all the buzz\u00a0around the PC ransomware WannaCry<\/a>, it\u2019s no surprise that a fake antivirus (FakeAV) has emerged on Google Play. \u00a0Entitled WannaCry Ransomware Protector for Android, <\/em>the bold claim it makes is\u00a0right in its name. \u00a0So how do we know this claim is false? Simple, there is no WannaCry Ransomware for mobile \u2014 at least not at the time of this writing. Furthermore, the fact that Google Play has already pulled it from the store supports our case.<\/p>\n

To see this FakeAV in action, click through the slideshow below:<\/p>\n

Click to view slideshow.<\/a> <\/p>\n

As you can see, there isn\u2019t much to it. After running a fake scan, it gains revenue through\u00a0advertisements and through\u00a0installs of more apps. Note that the apps shown to install are legitimate and found on Google Play. Other than making a false claim about protecting against the WannaCry<\/a> ransomware, the app is harmless.<\/p>\n

What’s In a Name<\/h3>\n

Currently (at the time of this writing), there are two other apps on Google Play from the same developers\u00a0that do exactly the same thing as WannaCry Ransomware Protector for Android,<\/em>\u00a0Mobile Security Antivirus 2017,<\/em> and AMDF Anti-Virus 2017<\/em>. Because these apps are not\u00a0blatantly misrepresenting what they can do, we do not feel the need to classify these two \u2014 nor do other vendors. As for WannaCry Ransomware Protector for Android, <\/em>we found the claim just too bold to not classify \u2014 so we as Android\/PUP.Riskware.FakeAV.wacry. What can we say, sometimes it\u2019s all in a name.<\/p>\n

The post Mobile Menace Monday: Fake WannaCry Scanner<\/a> appeared first on Malwarebytes Labs<\/a>.<\/p>\n

https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Nathan Collier| Date: Mon, 26 Jun 2017 15:00:18 +0000<\/strong><\/p>\n\n\n\n
<\/a><\/td>\n<\/tr>\n
With all the buzz around the PC ransomware WannaCry, it\u2019s no surprise that a fake antivirus (FakeAV) has emerged on Google Play.<\/p>\n

Categories: <\/p>\n