Subscribe
Home Craft What Is Harly Malware on the Google Play Store?

What Is Harly Malware on the Google Play Store?

by Staff
0 comment
Harly Malware on the Google Play Store

What Is Harly Malware on the Google Play Store?

It’s a common misconception that if you exclusively use Google’s Play store to install apps onto your Android phone, the company will keep you safe from criminals and scammers who are desperate to steal your money. The reality is that, while it’s possible for Google to check the behavior of all Play Store apps, it doesn’t. Millions of devices could be affected by malware.


One such example of malware found on Google Play is Harly. So what is the Harly Trojan? How can you protect yourself from it?


What Is the Harly Trojan Subscriber?

Harly is the latest in a short series of Batman villain-themed malware for Android devices. Joker, an earlier piece of malware, was shoehorned into legitimate-looking apps, and would download code allowing it to send expensive SMS messages to premium rate phone numbers.

The reach of Joker was limited; Google removed 11 suspect apps from the Play store.

While Joker possessed a degree of subtlety, in that the apps themselves didn’t contain the malicious payload, the malware named after his fictional girlfriend (i.e. Harley Quinn) contains all the code it needs, and doesn’t rely on a remote command and control server.

Apps containing the Harly malware are easy to create, but hard to detect. Criminals download popular and useful apps from the Play store, inject their own code, then re-upload them under a different name. The apps work like they should: a strobing flashlight app will transform your student accommodation into a disco, and voice changers let you sound like Arnold Schwarzenegger.

But behind the scenes, Harly will secretly sign up your device for expensive subscriptions which are added to your monthly phone bill.

How Does the Harly Trojan Subscriber Work?

Most subscription services require SMS verification in order to take effect, while some go further and demand a phone call to an automated phone number before billing your account.

Harly can sidestep these steps by opening hidden windows to enter sign-up details, and intercepting SMS messages in order to enter verification codes. It can even make phone calls.

In order to do this, Harly must first disconnect your device from Wi-Fi, and connect through mobile data.

Security researchers, Kaspersky, have so far identified 190 different Android apps containing the Harly malware. A conservative estimate puts the number of downloads at 4.8 million—although the true number may be far higher.

Am I in Danger From the Harly Malware?

Unless you live in Thailand, you’re probably not in immediate danger. As far as is currently known, Harley is only configured to work with local Thai telecoms providers. However, if the criminals decide to reconfigure Harly to work with cell companies in the US or Europe, it would be a trivial change to make.

How Can I Protect Myself From Harly Malware on Android?

In the long term, you should take care with what you install on your Android device.

  • Check the reviews: The first victims of any scam are typically (and justifiably) angry about it, and when their phone bill arrives, will leave reviews complaining that they’ve been scammed. Pay attention to the reviews, and avoid anything with low ratings or angry feedback.
  • Don’t install unnecessary apps on your device: The more apps you have on your device, the more likely it is that one of them is compromised. Ask yourself if you really need a Pony camera app, or yet another live wallpaper switcher. You probably don’t.
  • Consider using open source apps exclusively: It’s easy to hide malware in apps when the source code is obscured. With open source apps, the source code is available for inspection by anyone, and any malware can easily be found. Bad actors won’t even bother trying to hide malware in open source. F-droid is an excellent repository of open source apps for Android.
  • Cap your phone bill: Most providers allow you to place a spending limit on your phone bill. Take advantage of this to prevent subscription services billing you.

Harly: Just the Latest Malware Distributed Through Google Play

Cybercriminals are always looking for ways to get their wares onto your devices and your money into their pockets. For them, Google is the gift that just keeps on giving. As the dominant mobile operating system, even a small degree of success can mean millions of dollars for criminals. Keeping your Android device safe is your responsibility.

Read the full article here

SaleBestseller No. 1
Apple AirPods Max Wireless Over-Ear Headphones. Active Noise Cancelling, Transparency Mode, Spatial Audio, Digital Crown for Volume Control. Bluetooth Headphones for iPhone - Green
Apple AirPods Max Wireless Over-Ear Headphones. Active Noise Cancelling, Transparency Mode, Spatial Audio, Digital Crown for Volume Control. Bluetooth Headphones for iPhone - Green
 Apple-designed dynamic driver provides high-fidelity audio; Active Noise Cancellation blocks outside noise, so you can immerse yourself in music
$449.99
Bestseller No. 3
Apple iPad Air 2, 64 GB, Space Gray (Renewed)
Apple iPad Air 2, 64 GB, Space Gray (Renewed)
Apple iOS 8; 9.7-Inch Retina Display; 2048x1536 Resolution; A8X Chip with 64-bit Architecture; M8 Motion Coprocessor
$185.00
SaleBestseller No. 4
2021 Apple 10.2-inch iPad (Wi-Fi, 64GB) - Silver
2021 Apple 10.2-inch iPad (Wi-Fi, 64GB) - Silver
Gorgeous 10.2-inch Retina display with True Tone; A13 Bionic chip with Neural Engine; 8MP Wide back camera, 12MP Ultra Wide front camera with Center Stage
$269.99
Bestseller No. 5
2022 Apple TV 4K Wi‑Fi with 64GB Storage (3rd Generation)
2022 Apple TV 4K Wi‑Fi with 64GB Storage (3rd Generation)
4K Dolby Vision and HDR10+ for vivid picture quality; Dolby Atmos for three-dimensional, theater-like sound
$123.49
Bestseller No. 7
Apple AirTag 4 Pack
Apple AirTag 4 Pack
Keep track of and find your items alongside friends and devices in the Find My app; Simple one-tap setup instantly connects AirTag with your iPhone or iPad
$94.98
Bestseller No. 8
Apple MacBook Air with Intel Core i5, 1.6GHz, (13-inch, 4GB,128GB SSD) - Silver (Renewed)
Apple MacBook Air with Intel Core i5, 1.6GHz, (13-inch, 4GB,128GB SSD) - Silver (Renewed)
1.6 GHz dual-core Intel Core i5 (Turbo Boost up to 2.7 GHz) with 3 MB shared L3 cache; 13.3-Inch (diagonal) LED-backlit Glossy Widescreen Display, 1440 x 900 resolution
$299.99
Bestseller No. 9
Apple Of My Eye
Apple Of My Eye
Amazon Prime Video (Video on Demand); Amy Smart, Burt Reynolds, Liam McIntyre (Actors); Castille Landon (Director) - Castille Landon (Writer) - Dori A. Rath (Producer)
$3.99
SaleBestseller No. 10
Apple 35W Dual USB-C Port Compact Power Adapter ​​​​​​​
Apple 35W Dual USB-C Port Compact Power Adapter ​​​​​​​
The compact size and folding prongs make it easy to pack and store.; Charging cable sold separately.
$52.00

You may also like

Leave a Comment

Iman Hearts is one of the biggest lifestyle news and articles portals, we provide the latest news and articles about family, lifestyle, entertainment, and many more, follow us to get the latest news about what matters to you.

 

© 2022 Iman Hearts. All rights reserved. Sitemap