These 16 Clicker Malware Infected Android Apps Were Downloaded Over 20 Million Times

As many as 16 malicious apps with over 20 million cumulative downloads have been taken down from the Google Play Store after they were caught committing mobile ad fraud. The Clicker malware masqueraded as seemingly harmless utilities like cameras, currency/unit converters, QR code readers,...

Social Media Hijacking Malware Spreading Through Gaming Apps on Microsoft Store

A new malware capable of controlling social media accounts is being distributed through Microsoft's official app store in the form of trojanized gaming apps, infecting more than 5,000 Windows machines in Sweden, Bulgaria, Russia, Bermuda, and Spain. Israeli cybersecurity company Check Point dubbe...

Tekya Malware Threatens Millions of Android Users via Google Play

Researchers have discovered a new family of auto-clicker malware that commits mobile ad fraud, lurking in 56 apps on the Google Play store. Collectively, they have been downloaded nearly a million times worldwide. A team from Check Point Software recently discovered the malware, dubbed Tekya, whi...

Apple Removes 17 Malicious iOS Apps From App Store

Researchers have uncovered 17 apps on Apple’s official App Store infected with malware. Apple has since removed the apps from the App Store – but a “significant” number of iOS users could have installed them, researchers said. Once downloaded, the malicious apps infect victims with a trojan...

CVE-2019-13054

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z...

Input validation

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z...

CVE-2019-13054

The CVE-2019-13054 entry concerns Logitech R500 wireless presentation clickers. Connected sources describe a vulnerability allowing an attacker to determine the AES key, enabling keystroke injection. On Windows, text can be injected by abusing ALT+NUMPAD input to bypass the A–Z character restrict...

Labs report: summer ushers in unprecedented season of breaches

In this edition of the Malwarebytes Cybercrime Tactics and Techniques report for the third quarter of 2017, we saw a number of high profile breaches targeting the personal information of hundreds of millions of people. While the Equifax breach may have dominated the news cycle, notable attacks...

Mobile Menace Monday: Malicious clicker with extra maliciousness included

A new malicious clicker has emerged onto third-party app stores. Chinese in origin, the malicious app uses heavy obfuscation and poses as a battery optimizer app. We classify is as Android/Trojan.Clicker.hyj. Click to view slideshow. Hide what’s inside To obfuscate its code, Clicker.hyj uses an A...

The Magala Trojan Clicker: A Hidden Advertising Threat

One large group will slowly conquer another large group, reduce its numbers, and thus lessen its chance of further variation and improvement. … Small and broken groups and sub-groups will finally tend to disappear. Charles Darwin. 'On the Origin of Species' The golden age of Trojans and viruses h...

Case Clicker 2 - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Case Clicker 2 published at the 'play' market has multiple vulnerabilities...

Stored Cross-Site Scripting Vulnerability in Click Story App

Clicker Stories is an audiobook app for children. A stored cross-site scripting vulnerability exists in the Clicker Stories app. Allows an attacker to insert malicious scripts into input points where the vulnerability exists, to steal users' cookies or to realize phishing attacks...

Clicker Games Christmas Gift - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Clicker Games Christmas Gift published at the 'play' market has multiple vulnerabilities...

Billionaire Clicker - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Billionaire Clicker published at the 'play' market has multiple vulnerabilities...

Kingdom Clicker - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Kingdom Clicker published at the 'play' market has multiple vulnerabilities...

Kitty Cat Clicker - The Game - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Kitty Cat Clicker - The Game published at the 'play' market has multiple vulnerabilities...

Vlogger Go Viral - Clicker - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Vlogger Go Viral - Clicker published at the 'play' market has multiple vulnerabilities...

City Rebuild - Zombie Clicker - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application City Rebuild - Zombie Clicker published at the 'play' market has multiple vulnerabilities...

Dragon Clicker - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dragon Clicker published at the 'play' market has multiple vulnerabilities...

School Clicker - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application School Clicker published at the 'play' market has multiple vulnerabilities...