Multi-tricks HiddenAds Malware
ID: 337c1a7e-7a43-50ed-9361-2f028f08ac70
STIX ID: report--337c1a7e-7a43-50ed-9361-2f028f08ac70
Feed Name: McAfee Labs Blog
McAfee Mobile Research describes a large-scale HiddenAds Android adware campaign that distributes fake popular apps (e.g., FaceApp, Call of Duty) outside Google Play, hides its launcher icon, uses icon/package tricks and native decryption to load an obfuscated DEX payload that serves ads and redirects (including gambling sites). The report documents distribution channels, anti-analysis techniques, request/response behavior, C2 domain lists, and sample hashes, concluding this is a well-designed, stealthy adware campaign detected as Android/HiddenAds.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
