Malware attacks that can suck credit have reportedly hit 10 million Android users in 70 countries, including Indonesia. Here's the full list.
This global and massive malware attack was reported by cybersecurity company Zimperium zLAbs. They refer to this malicious malware as 'GriftHorse'. The attacks were reported to have occurred from November 2020 to April 2021.
"This rogue Android app looks harmless when reading its description and asking for access permissions," Zimperium researchers Aazim Yaswant and Nipun Gupta said in their report, as quoted by The Hacker News, Friday (1/10).
What is the modus operandi of the crime? According to Zimperium, this malicious malware sucks the pulse of its victims. The trick is to secretly register the victim's cellphone number to a subscription premium SMS service.
"Users are billed to pay for premium services every month that they participate in without their knowledge and consent," he explained.
After the user downloads an application containing GriftHorse, this Android malware takes advantage of the victim's negligence and uses social engineering to register the victim's number to a subscription premium SMS service. The trick is to shower victims with notifications promising free gifts.
Once this notification is clicked, the victim will be directed to a special website page that requires them to enter a phone number for verification. Apparently, the victim's phone number entered was actually registered to subscribe to a premium SMS service by the fraudster.
This premium SMS service can suck up the victim's credit for 30 Euros (around Rp. 500 thousand) every month. GriftHorse operators are estimated to pocket millions of Euros from their victims every month, and the total money stolen during their operations is estimated to be in the hundreds of millions of Euros.
Zimperium has reported its findings to Google and over 200 rogue apps containing GriftHorse have been kicked from the Google Play Store. The problem is, this application has been downloaded hundreds of thousands of times. For example, the Handy Translator Pro application that contains GriftHorse has been downloaded 500 thousand times.
Another problem is that this application is also still circulating in insecure third-party application repositories, be it single-stage domains or two-stage domains. This is the risk of harm from side applications.
The most effective way to fight it is to immediately delete the application containing this malware from each of our cellphones. Is your HP hit too?
Here's a complete list of over 200 malware apps compiled by us from the Zimperium report. We divide it into several categories for easy search
List of applications that contain pulse suction Android malware:
Translator App
Handy Translator Pro
My Chat Translator
Free Photo Translator
Instant Speech Translation
Chat Translator All Messengers
Mine Easy Translator
SnapLens - Photo Translator
Intelligent Translator Pro
iTranslator_ Text & Voice & Photo
English Arabic Translator direct
Language Translator-Easy&Fast
Translate It - Online App
Second Translate PRO
Health Apps
Heart Rate and Pulse Tracker
Heart Rhythm
Fitness Points
Heart Rate and Meal Tracker
Pulse App - Heart Rate Monitor
Fitness Trainer
Heart Rate Pro Health Monitor
FastPulse - Heart Rate Monitor
Navigation and Tracker Apps
Geospot: GPS Location Tracker
iCare - Find Location
Smart Spot Locator
iConnected Tracker
GPS Phone Tracker - Family Locator
Locatoria - Find Location
Clap To Find My Phone
Phone Finder by Clapping
My Locator Plus
Loca - Find Location
R Circle - Location Finder
Mobile Things Finder
Phone Search by Clap
Live Mobile Number Tracker
Game Apps
Bus - Metrolis 2021
Racers Car Driver
Slime Simulator
OFFRoaders - Survive
Bus Driving Simulator
Idle Gun Tycoon
Truck - RoudDrive Offroad
Street Cars: pro Racing
Ludo Speak v2.0
Forza H Mobile 4 Ultimate Edition
Amazing Sticky Slime Simulator ASMR
Ludo Game Classic
Squishy and Pop It
Piano Bot Easy Lessons
Skycoach
Applications Photo and Video Editor
Amazing Video Editor
CutCut Pro
Photo Effects Pro
Pookie-Cartoon Photo Editor
PikCho Editor app
Video & Photo Recovery Manager 2
ClipBuddy
Vector arts
Photo Lab
You Frame
Job Applications and Finance
Scanner App Scan Docs & Notes
е едиты 247
VPN Zone - Fast & Easy Proxy
Smart Call Recorder
Call Recorder iCall
Call Recorder Pro
100% Projector for Mobile Phone
WiFi Unlock Password Pro X
Keyboard: Virtual Projector App
Scanner Pro App: PDF Document
QR Reader Pro
Call Record Pro
QR Code Reader - Barcode Scanner
X-Ray Bag 100% Scanner
3D Camera To Plan
Free Coupons 2021
KFC Saudi - Get free delivery and 50% off coupons
Coupons & Gifts: InstaShop
Phone App
Fingerprint Changer
Safe Lock
Locker Tool
Keyboard Themes
Launcher iOS 15
Fingerprint Defender
Hunt Contact
Icony
PhoneControl Block Spam Calls
Parallax paper 3D
Caller-x
Live Wallpapers & Backgrounds
TrueCaller & TrueRecoder
Battery Live Wallpaper 4K
GetContactor
AR Phone Booster - Battery Saver
Free Calls WorldWide
TagsContact
Color Call Changer
Keyboard FX
Phone Caller Screen 2021
Proof-Caller
CallerID
CallHelp: Second Phone Number
Caller ID & Spam Blocker
Easy Bass Booster
FindContact
Launcher iOS for Android
Call Blocker-Spam Call Blocker
Lifestyle and Entertainment Apps
Lifeel - scan and test
What's Me Sticker
Horoscope : Fortune
Clap 50,000
Daily Horoscope & Life Palmestry
Cinema Hall: Free HD Movies
Face Analyzer
Screen Mirroring TV Cast
Pony Video Chat-Live Stream
Zodiac : Hand
Easy TV Show
Dating App - Sweet Meet
Soul Scanner - Check Your
CIAO - Live Video Chat
Plant Camera Identifier
Stickers Maker for WhatsApp
HOO Live - Meet and Chat
Muslim App
Qibla AR Pro
Qibla Pass Direction
Qibla Compass (Kaaba Locator)
Qibla Ultimate
iSalam Qibla Compass
Qibla correct Quran Koran Koran
Ela-Salaty: Muslim Prayer Times & Qibla Direction
Qibla Compass
Free Islamic Stickers 2021
Qibla Finder - Qibla Direction
Qibla direction watch (compass)
One-stage domain
hxxps://hotofecro.com/
hxxps://alaiblompass.com/
hxxps://heartratteandpulsetracker.com/
hxxps://icoonectedtrack.com
hxxps://ospocatracker.com
hxxps://laalaslirayeblection.com
hxxps://iblompass.com/
hxxps://smalllcallrecorder.com
hxxps://anguaganslatast.com/
hxxps://oroscopemestry.com/
hxxps://blompascator.com/
hxxps://leunoon.com/
hxxps://arindocation.com/
hxxps://rooitor.com/
hxxps://mychattranslator.club/
hxxps://rulapptoplan.com/
hxxps://rporttranslator.com/
hxxps://muslimasauda.com/
hxxps://martpolocator.com/
hxxps://wfupppx.com/
hxxps://scandocnotes.com/
hxxps://freecoupon21.com/
hxxps://ponyvideochat.com/
hxxps://ludamec.com/
hxxps://chat-transa.com/
hxxps://soulscanneryh.com/
hxxps://d3cameraplan.com/
hxxps://qibla-ultima.com/
hxxps://zoofanimalm.com/
hxxps://ciaolvc.com/
hxxps://heartrateproxhealthmonitor.com/
hxxps://bus-metrolis.com/
hxxps://truck-rouddrive.com/
hxxps://locatinfind.com/
hxxps://camerdentifier.com/
hxxps://locatorqiafindlocation.com/
hxxps://cocachar.com/
hxxps://squishyp.com/
hxxps://antranslaro.com/
hxxps://ftphotom.com/
hxxps://lockul.com/
hxxps://fingerprihanger.com/
hxxps://locatorshar.com/
hxxps://kfcwsa.com/
hxxps://gpsphonuetrackerfamilylocator.com/
hxxps://cailrecorder.com/
hxxps://tqiblacompas.com/
hxxps://kvprojectop.com/
hxxps://pikchoeditor.com/
hxxps://streetprocarsracingss.com/
hxxps://nemaeovies.com/
hxxps://aecodero.com/
hxxps://ivlewepapallrbkragonucd.com/
hxxps://heartrateandmealtracker.com/
hxxps://phonecontrolblockspamcalls.com/
hxxps://etcotater.com/
hxxps://canopoument.com/
hxxps://locxfindxlocx.com/
hxxps://mnesytrlatr.com/
hxxps://huntcontactz.com/
hxxps://intelgenttran.com/
hxxps://facenayer.com/
hxxps://fnbdeiegpslocoiatntcrkaer.com/
hxxps://trcalluecodr.com/
hxxps://qrreaderpro.com/
hxxps://itranstxtvoicepht.com/
hxxps://qiberiblaon.com/
hxxps://iconylc.com/
hxxps://lsepeanitor.com/
hxxps://fxkwboard.com/
hxxps://dehcoveanager.com/
hxxps://tickeakhatsp.com/
hxxps://phoneboster.com
hxxps://phonfinbyclap.com/
hxxps://aralaper.com/
hxxps://qibdirctiowa.com/
hxxps://islsrickers.com/
hxxps://feartranslator.com/
hxxps://vpnzfep.com/
hxxps://snaples-pt.com/
hxxps://qiblassiection.com/
hxxps://easyvshow.com/
hxxps://qibla-quran.com/
hxxps://qrcodesscan.com/
hxxps://hoolives.com/
hxxps://burivingsim.com/
hxxps://coupongiftsnstashop.com/
hxxps://fingdefend.com/
hxxps://projectormp.com/
hxxps://forzahmobile.com/
hxxps://artateulseonitor.com/
hxxps://sslasmr.com/
hxxps://bagscaner.com/
hxxps://phonecallerscreen.com/
hxxps://datingappswmt.com/
hxxps://lifeel-scan.com/
hxxps://colorizerset.club/
hxxps://expresscreditcash.com/
hxxps://ccallerx.com/
hxxps://transatitonneap.com/
hxxps://lasouncherio.com/
hxxps://claptfindzmphone.com/
hxxps://mirrorscreencasttvv.com/
hxxps://ircleocatinder.com/
hxxps://mobleingsder.com/
hxxps://proocallerr.com/
hxxps://frecalwolwid.com/
hxxps://allelpcoonmber.com/
hxxps://faspulhearratmoni.com/
hxxps://fincconttact.com/
hxxps://uncherdroid.com/
hxxps://iveilembercker.com/
hxxps://lepamcker.com/
hxxps://lockaaocker.com/
hxxps://onarchbylap.com/
hxxps://secondtranslatpr.com/
hxxps://tgscontakcs.com/
hxxps://lockaaocker.com/
hxxps://callwhozdine.com/
hxxps://perargero.com/
hxxps://mylocatorplus.club/
hxxps://comclap.club/
hxxps://callerids.club/
hxxps://instantspeechtranslation.club/
hxxps://photoeditorbest.club/
hxxps://piction.club/
hxxps://drivers.club/
hxxps://skycoachgg.club/
hxxps://ffitnesstrainer.club/
hxxps://racerscardriver.club/
hxxps://fitnessdias.club/
hxxps://meetingonlinechat.club/
hxxps://fitnessgymup.club/
hxxps://editsbackground.club/
hxxps://cutcutpro.club/
hxxps://drivingexpiriencesimulator.club/
hxxps://clipbuddy.club/
hxxps://horoscopefortune.club/
hxxps://ludospeakeasy.club/
hxxps://fitnesspoint.club/
hxxps://wallvoluminousfourk.club/
hxxps://cvectorart.club/
hxxps://ludospeakv2.club/
hxxps://callrecordpro.club/
hxxps://carracer.club/
hxxps://slimesimulator.club/
hxxps://offroaderssurvive.club/
hxxps://lending-online.club/
hxxps://controlcenterios.club/
hxxps://callerids.club/
hxxps://carracer.club/
hxxps://streetracingg.club/
hxxps://checkheart.club/
hxxps://keyboardthemes.club/
hxxps://whatsmesticker.club/
hxxps://batterychargingeffect.club/
hxxps://luxoreditor.club/
hxxp://lionflix.club/
hxxps://amazingvideoeditor.club/
hxxps://zodiachand.club/
hxxps://zeusalmighty.club/
hxxps://pharaohsadventure.club/
hxxps://batterylivewallpaperhd.club/
hxxps://comqubla.club/
hxxps://safelock.club/
hxxps://heartrhythm.club/
hxxps://easybassbooster.club/
hxxps://comphotolab.club/
Two-stage domain
hxxps://678ikmbtui.com/
Third-Stage Domains
hxxps://safe-link.mobi
hxxps://at.gogameportal.club
hxxps://activate-your-account-now.com
hxxps://continue-to-get-content-now.com
hxxps://your-access-here.com
hxxps://app.buenosocial.club
hxxps://join.crazymob.co
hxxps://vl.denrok.space
hxxp://www.timpromos.com.br
hxxps://campaignmanager.fun.moobig.com
hxxps://get-your-access-now.com
hxxp://v.mobzones.com
hxxp://mt2-sdp4.mt-2.co:8010
hxxps://go.whatabookmark.com
hxxps://lp.shoopadoo.com
hxxps://es.mobiplus.me
hxxps://af.to.123games.club
hxxps://be.startdownload.mobi
hxxps://za.startdownload.mobi
hxxp://n.appspool.net
hxxps://wap.trend-tech.net
hxxps://fr.chillaxgames.mobi
hxxps://tracking.hexilo.com
Well, that's a list of applications and websites that contain GriftHorse malware. Be careful and delete it immediately if one of them is in the application list on your cellphone.
