Malware Disguised As Font Installing Applications on Google Play

Advertisement

Webroot security has discovered a malware on the Google Play Market that downloads spyware onto an Android mobile device. Webroot security has given this malware and spyware the name: "Android.TechnoReaper". The name of this malicious Android application in the Google Play store is "Galaxy Fonts".

Malware Disguised As Font Installing Applications on Google Play
Advertisement

This is how the Android Malware Font Installing Applications in Google Play looks

Android Malware Font Installing Applications on Google Play

If this malicious font installing application is installed, it will download a spyware onto your Android mobile device.

Malware "Android.TechnoReaper" Installation Process

Malware "Android.TechnoReaper" Installation Process

If you click on "Download", you will see the following link: “Download iKno from the Android Market”, but it is not actually linked to the Android Market. When clicked, the spyware ikno.apk file simply downloads directly from a malicious website.

This spyware will spy on your text messages (SMS), call logs, and location, which it will send back to the cybercriminals behind these malwares.

If you do not have antivirus software installed on your mobile device, it is recommended that one be installed.

I recommend using this antivirus software: Webroot Secure Anywhere Mobile.

Click here to download it at the Google Play store.

For more detailed information about this malware, click here.

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search Search engine.

Note: Some of the information in samples on this website may have been impersonated or spoofed.
Would you share this article with others?  +

DonateHelp maintain Online Threat Alerts (OTA).

Comments, Questions, Answers, or Reviews

Comments (Total: 1)

To protect your privacy, please do not post or remove sensitive information in or from your comments, questions, or reviews. NB: We will use your IP address to display your approximate location to other users. That location is not enough to find you.

Your comment, answer, or review will be set as anonymous because you are not signed in. An anonymous comment, answer, or review cannot be edited or deleted, therefore, review it carefully before posting. Sign-in.

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts (OTA).

  • November 26, 2018 at 2:14 AM by an anonymous user from: Philadelphia, Pennsylvania, United States

    I didn't download any of the fonts listed but this malware was installed on my cell phone.

    It has many components including invading my andriod's acct info and using the manufacture of the device (lg apps) to gain access.

Comments Show More Comments (0)

Write Your Comment, Question, Answer, or Review

Recommendation / Advertisement
Malware Disguised As Font Installing Applications on Google Play