A research firm found about 60 games, many aimed at kids, that contained hidden pornographic malware in their codes. Google quickly responded by removing them from Google Play.
The team at Check Point Software Technologies first reported about the malware on Friday. Called "AdultSwine," the malware that is hidden inside the games were displaying pornographic images that looked like ads, but were designed to prompt users to download fake security software.
The users were then encouraged to click on other links they would have to pay for.
Along with encouraging users to download scareware and pay for premium services, AdultSwine was also meant to stole credentials, according to Check Point.
"We've removed the apps from Play, disabled the developers' accounts, and will continue to show strong warnings to anyone that has installed them," said Google in a statement. "We appreciate Check Point's work to help keep users safe."
Google explained that the issue doesn't exploit vulnerabilities in its Android security. Although people may have installed those games, the devices themselves weren't affected.
Before Google stepped in, those apps/games have been downloaded between 3 million and 7 million times, according to the researchers, citing the information from Google Play's data.
After being downloaded and installed, AdultSwine's code that is hidden will begin contacting the developers' Command and Control to send data about the infected device and receiving instructions on what it should do next. The instructions include displaying the fake ads, scaring users to install fake security apps and charging victims for services they never have requested or received.
The complete list of Affected apps, according to Check Point, include:
- Five Nights Survival Craft
- Mcqueen Car Racing Game
- Addon Pixelmon for MCPE
- CoolCraft PE
- Exploration Pro WorldCraft
- Draw Kawaii
- San Andreas City Craft
- Subway Banana Run Surf
- Exploration Lite : Wintercraft
- Addon GTA for Minecraft PE
- Addon Sponge Bob for MCPE
- Drawing Lessons Angry Birds
- Temple Crash Jungle Bandicoot
- Drawing Lessons Lego Star Wars
- Drawing Lessons Chibi
- Girls Exploration Lite
- Drawing Lessons Subway Surfers
- Paw Puppy Run Subway Surf
- Flash Slither Skin IO
- Invisible Slither Skin IO
- Drawing Lessons Lego Ninjago
- Drawing Lessons Lego Chima
- Temple Bandicoot Jungle Run
- Blockcraft 3D
- Jungle Survival Craft 1.0
- Easy Draw Octonauts
- halloweenskinsforminecraft
- skinsyoutubersmineworld
- youtubersskins
- DiadelosMuertos
- Draw X-Men
- Moviesskinsforminecraft
- Virtual Family – Baby Craft
- Mine Craft Slither Skin IO
- Guide Clash IO
- Invisible Skin for Slither IO app
- Zombie Island Craft Survival
- HalloweenMakeUp
- ThanksgivingDay
- ThanksgivingDay2
- Jurassic Survival Craft Game
- Players Unknown Battle Ground
- Subway Bendy Ink Machine Game
- Shin Hero Boy Adventure Game
- Temple Runner Castle Rush
- Dragon Shell for Super Slither
- Flash Skin for Slither IO app
- AnimePictures
- Pixel Survival – Zombie Apocalypse
- Fire Skin for Slither IO app
- San Andreas Gangster Crime
- fidgetspinnerforminecraft
- Stickman Fighter 2018
- Subway Run Surf
- Guide Vikings Hunters
- Woody Pecker
- Pack of Super Skins for Slither
- Spinner Toy for Slither
- How to Draw Coco and The Land of the Dead
- How to Draw Dangerous Snakes and Lizards Species
- How to Draw Real Monster Trucks and Cars
- How to Draw Animal World of The Nut Job 2
- How to Draw Batman Legends in Lego Style
"...this malicious app seems to be a nasty nuisance, and most certainly damaging on both an emotional and financial level, it nevertheless also has a potentially much wider range of malicious activities that it can pursue, all relying on the same common concept," said Check Point.
While in the cases observed, the apps have shown misleading ads, they could also do whatever social engineering schemes the developers had in mind.
With Google Play known to have lesser restriction than Apple, these plots can continue somewhere in the future.
