Live data from Hacker News

The Judy Malware: Possibly the largest malware campaign found on Google Play

blog.checkpoint.com

11–20 of 85 posts

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#11
post #8
post #2

Android is the new Windows. Expecting some downvotes. But truth must be told. You're welcome.

Maybe the Apple "walled garden" keeps the animals from eating your fruit.

Partly related to ads

I heard of something with Apple, somebody was able to change the checksum or something to an Apple app before it was submitted to a store and all the ad revenue went to that person. It was on a podcast I heard a few month(s) ago.

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#12

I'm curious if anyone has a sense for how much they made from this? I just don't have a good sense for scale and dimensions of this. If it went undetected for so long they must not have been at least somewhat conservative in their approach, so say 5mil DAU times 1 click a day at $0.25/click. So, million-ish dollars a day?

So, this was an ad-referral click of some sort (article doesn't say)? AdWord clicks generate revenue for Google, not advertisers.

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#13

I'm curious if anyone has a sense for how much they made from this? I just don't have a good sense for scale and dimensions of this. If it went undetected for so long they must not have been at least somewhat conservative in their approach, so say 5mil DAU times 1 click a day at $0.25/click. So, million-ish dollars a day?

Per a Forbes article on the subject [0]

"Check Point estimated the firm was making millions from the ad clicks, in the region of $300,000 per month."

I imagine your price per click is over-estimated by a couple orders of magnitude, but that's just a guess.

[0] https://www.forbes.com/sites/thomasbrewster/2017/05/26/googl...

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#14
This isn't really malware in the traditional sense, it doesn't damage users of the app itself or harvest information from them, this is simply ad fraud, it only damages Google and its advertisers.

It seems to me like CheckPoint is fishing for internet points with this title.

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#15
post #7

Earlier quoted context omitted.

This is the kind of malware that is difficult to block imo. As long as the auto clicking is done at a suitable interval, there really is no easy way to detect it. The question is: would such an attack work on Apple devices? I'm assuming that the iOS API provides similar functionality to apps running on the device.

I would expect the malware developers already to have targeted iOS if it were possible?

There are over twice as many android devices as ios devices, so if you're a malware creator it might make sense only to target the biggest fish.

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#16

Earlier quoted context omitted.

I would expect the malware developers already to have targeted iOS if it were possible?

There are over twice as many android devices as ios devices, so if you're a malware creator it might make sense only to target the biggest fish.

It would make sense to target both.

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#17

This isn't really malware in the traditional sense, it doesn't damage users of the app itself or harvest information from them, this is simply ad fraud, it only damages Google and its advertisers. It seems to me like CheckPoint is fishing for internet points with this title.

Well malware has many categories and one is adware.

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#19
post #16

Earlier quoted context omitted.

There are over twice as many android devices as ios devices, so if you're a malware creator it might make sense only to target the biggest fish.

It would make sense to target both.

Who's to say they haven't already?

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#20
post #7
post #3

There will always be bad actors, but I can't understand why Google tolerates low level malware. At least make them work a little.

This is the kind of malware that is difficult to block imo. As long as the auto clicking is done at a suitable interval, there really is no easy way to detect it. The question is: would such an attack work on Apple devices? I'm assuming that the iOS API provides similar functionality to apps running on the device.

You don't need to detect it as it's going on, it should be a part of the approval process for getting the app accepting into the Play store. Apps should undergo regular static and dynamic analysis. And probably some improvements to Bouncer
Post reply on HN