Beauty Camera Apps Send Users Porn, Collects Pictures

This report analyzes a set of malicious Android beauty/camera apps (detected as AndroidOS_BadCamera.HRX) on Google Play that have been widely downloaded and are capable of hiding their launcher icons, using packers, fetching remote ad-configurations, showing persistent full-screen malicious ads that redirect to phishing or paid pornography sites, and potentially collecting uploaded photos. The report provides technical details, network endpoints, code behavior, a table of package name IOCs with install counts, and user-focused mitigation advice.