This mobile application is definitely something to scream in many ways. Android game "Scary Granny ZOMBYE Mod: The Horror Game 2019" steals Google's and Facebook's user data. The malicious application tries to extract data and money from its users to the attacker.
"Scary Granny ZOMBYE Mod: The Horror Game 2019" was a horror game that imitated another popular Android game "Grandma". Users have been given the task of running away from the zombies while discovering extra lives and different weapons. The game has been installed over 50,000 times and has been praised by a 4-star rating in Google Play before it was removed June 27.
Image Credit: wander
Security experts from Wander for mobile security solutions discovered that gaming secretly steals data. The application specifically targeted those who did not have the latest Android OS. There was a time release function on it and would work normally a few days before malicious behavior would appear. After a few days, the app will show a notification that encourages users to update Google's security information. The user will then be redirected to a fake Google sign in page whose name was very similar to Google's legitimate.
The application was pretty stable. You will be prompted to run the device when the device restarts. Then it will show a fake Google layer and take over the entire screen of the device. With these methods, the app could steal user recovery emails, phone recovery numbers, birthdays, control codes, and cookies and tokens. Although the researchers could not confirm whether the app was stealing Facebook's user data, the app contained the suspicious Facebook package name. Seemingly, the attackers seemed to be stealing this information.
The app also included fake ads for applications such as Amazon, Hulu, Instagram, and Snapchat. Researchers believe attackers were trying to instruct users to download even more malicious apps. They noticed that one of them redirects to a page that Google actively blocks.
Above all, the app was also trying to separate money from its users. The app will ask whether the user wants to pay for the game or play a free trial. If a user chooses a "free trial", the application will download a PayPal page that is £ 18 ($ 22).
One recent study found that Google Play hosts a wide range of counterfeit apps. Although most of these applications were quickly removed, "Scary Granny ZOMBYE Mod: The Horror Game 2019" managed to stay under the radar for some time. Researchers believe that the app was somewhat suspicious for a while because it functioned as a legitimate game. The time-release function also meant that it took a few days before the game behaved maliciously. As with any app, it's important to check the application permissions before downloading and installing on your device.