Various Google Play Camera Apps Are Malicious

Trend Micro has reported that several beauty camera apps (detected as AndroidOS_BadCamera.HRX) on Google Play are capable of accessing remote ad configuration servers that can be used for malicious purposes. Some of these apps have already been downloaded millions of times.

Some of these apps redirect users to phishing websites that ask the user for personal information, such as addresses and phone numbers. Other’s display pop up adverts, even when the app is not in use. Some of these ads are fraudulent content and pornography.

Many of these malicious apps take try to look as legitimate as possible, users should always investigate the legitimacy of an app. One good method of doing this is by checking reviews from other users. If the reviews mention any kind of suspicious behavior, then it might be a good idea to refrain from downloading the app.

Indicators of Compromise (IoCs)

PackageLabelInstalls
com.beauty.camera.years.proPro Camera Beauty1,000,000+
com.cartoon.art.photo.ygy.cameraCartoon Art Photo1,000,000+
com.lyrebirdstudio.emoji_cameraEmoji Camera1,000,000+
art.eff.filter.photo.editorArtistic effect Filter500,000+
art.filter.editor.imgeArt Editor100,000+
com.beauty.camera.project.cloudBeauty Camera100,000+
com.selfie.camerapro.proSelfie Camera Pro100,000+
com.camera.beauty.kwok.horizonHorizon Beauty Camera100,000+
com.camera.ygysuper.photographSuper Camera100,000+
com.effects.art.photo.for.selfArt Effects for Photo100,000+
com.solidblack.awesome.cartoon.art.pics.photo.editorAwesome Cartoon Art100,000+
com.photoeditor.artfilterphotoArt Filter Photo50,000+
com.photocorner.artfilter.arteffect.prizmaArt Filter Photo Effcts10,000+
com.picfix.cartoonphotoeffectsCartoon Effect10,000+
com.picsartitude.arteffectArt Effect10,000+
com.csmart.photoframelabPhoto Editor5,000+
com.wallpapers.nuclear.hd.hd3d.best.live.nuclearWallpapers HD5,000+
com.perfectmakeup.magicartfilter.photoeditor.selfiecameraMagic Art Filter Photo Editor5,000+
appworld.fillartphotoeditor.technologyFill Art Photo Editor1,000+
com.artflipphotoeditingArtFlipPhotoEditing1,000+
com.artphoto.artfilter.artpiczoneArt Filter1,000+
com.photoeditor.cartoonphotoCartoon Art Photo1,000+
com.photoeditor.prismaeffectsPrizma Photo Effect1,000+
com.cmds.artphotofiltereffectCartoon Art Photo Filter100+
com.latestnewappzone.photoartfiltereditorArt Filter Photo Editor100+
com.livewallpaperstudio.pixturePixture100+
app.pixelworlds.arteffectArt Effect50+
timepassvideostatus.photoarteffect.cartoonpainteffectPhoto Art Effect10+
com.techbuzz.cartoonfilterCartoon Photo Filter5+

Duncan Newell

Duncan is a technology professional with over 20 years experience of working in various IT roles. He also has a wide range of other skills in radio, electronics and telecommunications.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: