February 23, 2024

Minecraft clones stealthily load ads on millions of Android devices

Boffins at McAfee have identified 38 Android apps within the Google Play retailer that unashamedly rip off the ever-popular gaming sensation Minecraft, however are literally designed to stealthily earn promoting income.

The apps, which McAfee detects as Android/HiddenAds.BJL, load adverts within the background with out the person’s data, and are estimated to have been downloaded some 35 million instances onto Android units.

As a result of the video games had been downloaded from the official Google Play app retailer it’s potential that customers, who’re fairly prone to be younger kids as that’s Minecraft’s typical demographic, would assume that the apps had been correctly vetted for inappropriate behaviour.

EmailSignal as much as our publication
Safety information, recommendation, and suggestions.

And though no adverts are displayed throughout gameplay, they’re being downloaded within the background – gobbling up sources akin to bandwidth, battery, and CPU cycles.

Google Play listing for Block Box Master Diamond app
Google Play itemizing for Block Field Grasp Diamond app

McAfee’s specialists shared an inventory of the apps it had found, the preferred of which (Block Field Grasp Diamond) had collected 10 million downloads simply by itself.

  • Block Field Grasp Diamond
  • Block Field Skyland Sword
  • Block Boy Earth Mini
  • Block Metropolis Dragon Solar
  • Block Metropolis Enjoyable Diamond
  • Block Loopy Builder Metropolis
  • Block Diamond Boy Professional
  • Block Earth Skyland World
  • Block Forrest Tree Loopy
  • Block Enjoyable Rainbow Builder
  • Block Recreation Skyland Forrest
  • Block Loki Monster Builder
  • Block Fortunate Grasp Earth
  • Block Monster Diamond Dragon
  • Block Pixelart Tree Professional
  • Block Professional Forrest Diamond
  • Block Rainbow Monster Citadel
  • Block Rainbow Sword Dragon
  • Block World Tree Monster
  • Craft Boy Intelligent Solar
  • Craft Citadel Solar Rain
  • Craft Metropolis Loki Rainbow
  • Craft Intelligent Monster Citadel
  • Craft Dragon Diamond Robo
  • Craft Forrest Mini Enjoyable
  • Craft Recreation Earth World
  • Craft Loki Forrest Monster
  • Craft Fortunate Citadel Builder
  • Craft Mini Fortunate Enjoyable
  • Craft Monster Loopy Sword
  • Craft Rainbow Mini Builder
  • Craft Rainbow Professional Rain
  • Craft Sword Metropolis Professional
  • Craft Sword Mini Enjoyable
  • Craft Sword Vip Pixelart
  • Craft World Enjoyable Robo
  • Craftsman: Constructing Metropolis 2022
  • Lokicraft: Forrest Survival 3D

McAfee researchers contacted Google Play, which has since eliminated the offending apps from its retailer. However contemplating Google needed to be informed about these apps, one has to marvel what number of different comparable apps that break the Android app retailer’s guidelines proceed to lurk unnoticed.

Discovered this text attention-grabbing? Follow Graham Cluley on Twitter or Mastodon to learn extra of the unique content material we submit.

Graham Cluley is a veteran of the anti-virus trade having labored for a lot of safety firms because the early Nineteen Nineties when he wrote the primary ever model of Dr Solomon’s Anti-Virus Toolkit for Home windows. Now an unbiased safety analyst, he commonly makes media appearances and is a global public speaker on the subject of laptop safety, hackers, and on-line privateness.
Comply with him on Twitter at @gcluley, on Mastodon at @[email protected], or drop him an electronic mail.