Android Malware Judy

Android malware 'Judy' may have infected 36 millions android users already. Security researchers found that the malware Judy was found on over 40 apps. These apps were highly rated in Google Play store. These apps were there in Google Play store for several years.

This has described as possibly the largest malware campaign in Google Play store.

This malware generates large number of fraudulent clicks on advertisements for generating revenues. These apps were developed by Korean company.

Checkpoint has found several other apps in the Google Play Store that are containing the malware which were developed by other developers.

Once Google is aware of these infected apps, they have swiftly removed all the infected apps from the plat store.

One of the Judy apps were: Chef Judy: Picnic Lunch Maker developed by ENISTUDIO Corp.

Once a user downloads a malicious app, it silently registers which establish a connection with the Command and Control server (C & C). The server replies with a user agent string and URLs controlled by the malware author.

The malware then open a hidden browser and hit a targeted website and finds the ad frame and click on it.

Upon clicking the ads, the malware author receives payment from the website developer.

Who developed Judy?

This was developed by a Korean Company named Kiniwini which is registered in Google Play store as ENISTUDIO Corp.

List of malicious apps developed by Kiniwini:

List of apps developed by other developers:

For more details check out the checkpoint page http://blog.checkpoint.com/2017/05/25/judy-malware-possibly-largest-malware-campaign-found-google-play/