It doesn’t matter how hard Google tries to secure its Play Store, malicious apps still make its way towards the platform. The same thing happened with an app named ‘Updates for Samsung’ which promises firmware updates, but its nothing else than a scam tool that’s meant to trick Samsung phone owners into paying the developer.
The fake Samsung app has been spotted by Malware Analyst Aleksejs Kuprins, who works for the CSIS Security Group. According to the Google Play Store listing, the ‘Updates for Samsung’ app promises firmware updates for Samsung devices. However, upon opening, the app redirects users to ad-filled websites.
Not only that, but the website also convince users into making a payment for the updates. What’s worse is that the app has been downloaded over 10 million times. The most probable reason why the app managed to trick more than 10 million users is the fact that most people are unaware of the system update procedure and they end up searching for ‘System updates’ on the Google Play Stores.
Aleksejs Kuprins, the malware analyst at the CSIS Security Group, told ZDnet,
It would be wrong to judge people for mistakenly going to the official application store for the firmware updates after buying a new Android device
“Vendors frequently bundle their Android OS builds with an intimidating number of software, and it can easily get confusing. A user can feel a bit lost about the (system) update procedure. Hence can make a mistake of going to the official application store to look for system update”
The malware analyst from CSIS Security group further said that the developers had limited the free download speed to 56KBps so that the ongoing download gets times out. After that, the app asks users to purchase a $34.99 subscription to get the firmware update. What’s more dangerous is that the app uses its own payment system instead of directing users to the payment methods offered by the Google Play Store.
The malware analyst, of course, Aleksejs Kuprins contacted the Google Play Store and asked them to remove the app. The app was taken down by Google now, but it clearly shows that Google Play Store is still not fully safe and secure for users. So, what do you think about this? Share your views with us in the comment box below.
The fake Samsung app has been spotted by Malware Analyst Aleksejs Kuprins, who works for the CSIS Security Group. According to the Google Play Store listing, the ‘Updates for Samsung’ app promises firmware updates for Samsung devices. However, upon opening, the app redirects users to ad-filled websites.
Not only that, but the website also convince users into making a payment for the updates. What’s worse is that the app has been downloaded over 10 million times. The most probable reason why the app managed to trick more than 10 million users is the fact that most people are unaware of the system update procedure and they end up searching for ‘System updates’ on the Google Play Stores.
Aleksejs Kuprins, the malware analyst at the CSIS Security Group, told ZDnet,
It would be wrong to judge people for mistakenly going to the official application store for the firmware updates after buying a new Android device
“Vendors frequently bundle their Android OS builds with an intimidating number of software, and it can easily get confusing. A user can feel a bit lost about the (system) update procedure. Hence can make a mistake of going to the official application store to look for system update”
The malware analyst from CSIS Security group further said that the developers had limited the free download speed to 56KBps so that the ongoing download gets times out. After that, the app asks users to purchase a $34.99 subscription to get the firmware update. What’s more dangerous is that the app uses its own payment system instead of directing users to the payment methods offered by the Google Play Store.
The malware analyst, of course, Aleksejs Kuprins contacted the Google Play Store and asked them to remove the app. The app was taken down by Google now, but it clearly shows that Google Play Store is still not fully safe and secure for users. So, what do you think about this? Share your views with us in the comment box below.