Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Judy Malware: Possibly the largest malware campaign found on Google Play

blog.checkpoint.com

Post reply on HN
Print view View original

81–85 of 85 posts

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#81

Post by eridius »

bobsam wrote: post #80
eridius wrote: post #79

Earlier quoted context omitted.

Apple does not have an automatic approval process. They do a lot of automatic screening, because there's plenty that can be caught that way, but yes, every single app and update gets manual review by a human being. And your math is very wrong. Very few apps update every 2 weeks, most of the apps on the app store probably haven't even been updated in the past few months, and there's not even close to a billion apps. I…

Nope, you missread my numbers. I assume it takes one person 2 weeks to fully analyze an app (we are after all looking for well hidden malware, possibly downloaded from network after some use). Times 2.2 million apps. Times an average of 3 updates during its life time. There are not enough apple employees to pull what you calim. Hence approval is semi automatic, just like Google. Edit: 1 billion changed to 2.2 million…

You have no idea what you're talking about. Tell literally any third-party Apple developer that app review is automatic and you'll be laughed out of the room. Your math is way off.

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#82

Post by bobsam »

eridius wrote: post #81
bobsam wrote: post #80

Earlier quoted context omitted.

Nope, you missread my numbers. I assume it takes one person 2 weeks to fully analyze an app (we are after all looking for well hidden malware, possibly downloaded from network after some use). Times 2.2 million apps. Times an average of 3 updates during its life time. There are not enough apple employees to pull what you calim. Hence approval is semi automatic, just like Google. Edit: 1 billion changed to 2.2 million…

You have no idea what you're talking about. Tell literally any third-party Apple developer that app review is automatic and you'll be laughed out of the room. Your math is way off.

don't agree with my math? Show me your own numbers.

I feel you are just hiding your head in the sand instead of doing the sensible thing which is to ask apple to analyze this companys apps and report to public whether​ app store was affected.

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#83

Post by eridius »

bobsam wrote: post #82
eridius wrote: post #81

Earlier quoted context omitted.

You have no idea what you're talking about. Tell literally any third-party Apple developer that app review is automatic and you'll be laughed out of the room. Your math is way off.

don't agree with my math? Show me your own numbers. I feel you are just hiding your head in the sand instead of doing the sensible thing which is to ask apple to analyze this companys apps and report to public whether​ app store was affected.

I don't need to show you my numbers, because it's literally public knowledge that Apple manually reviews all apps and updates, and every single third-party developer can confirm this. If your app is set up with any sort of analytics you can even see when the reviewer looks at your app!

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#84

Post by __jal »

problems wrote: post #67
__jal wrote: post #62

Earlier quoted context omitted.

If you're using my cycles, bandwidth, memory, power, etc. without my permission, it is malware. This is not really that different than the spam "debate" - I've heard people argue that spam is no big deal because the bulk of it is caught. Tell that to people who run mail servers (but only if you brought your earplugs). I suppose that, because many people put up with so much surveillance, they have difficulty drawing a…

> the best predicate tipping point is based on intent. So, what of intent - are those people taking unique device identifiers, account names, installed package lists, etc not of a malicious intent with them? I'd say so. I'd say that intent is far more malicious than defrauding some advertisers.

And I'd agree with you - I also consider corporate surveillance as routinely practiced to be malevolent.

Re: The Judy Malware: Possibly the largest malware campaign found on Google Play

#85

Post by jwoloz »

smilliken wrote: post #31

It looks like the common component across the apps mentioned is in the "net.shinhwa21.jsylibrary" namespace. I made a list of the apps with that namespace, preview here: https://mixrank.com/playstore/apps?expiration=2017-06-30&lis... This list is a few times bigger than the ones mentioned in the article (been crawling for a long time, and try to be complete). If there's any security folks here that want access to the…

Would you mind sharing the digests of the apps you discovered, only ten are visible and it looks like there are multiple steps to set up a mixrank account
Post reply on HN