logo

Multi-tricks HiddenAds Malware

ID: 337c1a7e-7a43-50ed-9361-2f028f08ac70

STIX ID: report--337c1a7e-7a43-50ed-9361-2f028f08ac70

Feed Name: McAfee Labs Blog

Threat Score
70/100

Date Published: 2020-03-04

Date Updated: 2026-04-28

Author: ZePeng Chen

...
...

McAfee Mobile Research describes a large-scale HiddenAds Android adware campaign that distributes fake popular apps (e.g., FaceApp, Call of Duty) outside Google Play, hides its launcher icon, uses icon/package tricks and native decryption to load an obfuscated DEX payload that serves ads and redirects (including gambling sites). The report documents distribution channels, anti-analysis techniques, request/response behavior, C2 domain lists, and sample hashes, concluding this is a well-designed, stealthy adware campaign detected as Android/HiddenAds.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.