Trend Micro: New trending scams seen in Android market

Published February 10, 2012 9:48am

Users of mobile devices running Google’s Android OS may have to literally check the fine print if they want to avoid a new scam using popular apps to trick them into downloading rogue apps.

Computer security firm Trend Micro said the scammers use developer names that appear “quite similar” to the original developers.

In a blog post, Trend Micro cited a scammer using the popular game “Angry Birds” where the rogue app’s developer is listed as Rovio MobiIe – where the “L” in “Mobile” is actually an “I.”

“It is quite tricky and easy to miss. Users would really have to check the developer’s name closely on the ‘More from developer’ tab to see the real name,” it said.

Trend Micro also said the names and icons used for the apps were taken from other existing apps.

Once the user tries to install any of the apps listed under “rovio mobiie ltd,” the app will display an image also taken from the original app that has been modified to include text telling the user to click the link to complete the installation.

This will lead to a webpage that the user needs to fill up to unlock the “full version,” but it ends up redirecting users to advertisements.

“App stores ideally create a more secure environment for mobile users, where they can choose from pre-checked applications to download onto their devices. This works very well for users, as they are able to leverage the ‘reputation system’ instilled within the app store to be able to find the good and popular apps,” Trend Micro said.

But it noted cybercriminals are now learning to play the apps stores’ reputation system.

It noted the popularity of the game “Temple Run” was used to trick users before, and this time, the reputation of the app developer Rovio Mobile Ltd. was used.

“We expect that more cybercriminals will continue with this method, so it is very important for users to be informed of how they can avoid being victimized,” it said. — RSJ, GMA News

Tags: android