Malicious Optimizer and Utility Android Apps on Google Play Communicate with Trojans

[sidemoon]

 Malicious Optimizer and Utility Android Apps on Google Play Communicate with Trojans that Install Malware, Perform Mobile Ad Fraud

We recently discovered several malicious optimizer, booster, and utility apps (detected by Trend Micro as AndroidOS_BadBooster.HRX) on Google Play that are capable of accessing remote ad configuration servers that can be used for malicious purposes, perform mobile ad fraud, and download as many as 3,000 malware variants or malicious payloads on affected devices. 

These malicious apps, which are supposed to increase device performance by cleaning, organizing, and deleting files, have been collectively downloaded over 470,000 times. 
Our telemetry shows that this campaign has been active since 2017. As of writing time, Google Play has already removed the malicious apps from the Play Store. 

READ MORE

[Mike]

Thanks for the post.

[ahmadkhaje]

Even with the best antivirus software installed, my cell phone was disconnected
By installing a registry program
Scan multiple times with multiple antivirus
But unfortunately no sound returned
The antivirus I scanned
drweb-
avast-
F-Secure-Safe-
TrendMicro-
Malwarebytes-
kaspersky

None of them succeeded in removing the virus
Until you switch your phone's RAM