Porn Clicker app Masquerading as Dubsmash

This report analyzes an Android "Porn Clicker" malware masquerading as the Dubsmash app on Google Play that hides its icon after first run, continues running in the background, dynamically retrieves porn site URLs from remote servers (e.g., memr.oxti.org/g/getasite/ and memr.oxti.org/z/z2/) and executes JavaScript to generate fraudulent clicks for revenue; observed package names include com.memr.gamess and com.jet.dubsh, the variant has ~5,000 downloads, and users are advised to remove the app via Settings > Apps.