A new family of Android click-fraud trojans utilizes TensorFlow machine learning models to detect and interact with advertisement elements automatically. Unlike traditional trojans, these employ visual analysis rather than predefined JavaScript interactions, enhancing effectiveness against dynamic ads. Distributed via Xiaomi’s GetApps and third-party APK sites, malware operates in a ‘phantom’ mode using a hidden WebView to execute fraudulent clicks.
Researchers at Dr.Web identified infected applications, including popular games such as “Theft Auto Mafia” and “Cute Pet House,” and highlighted distribution through channels like Telegram and Discord. This malicious behavior remains covert, leading to battery drainage and increased data charges for users, while not directly threatening their privacy. Users are advised against installing apps from outside the Google Play Store, as Google Play Protect automatically shields against known malware. Awareness and caution are vital for Android users to stay safe from such cybercriminal activities.
Source link
