Don’t install this APKPure version; app store infected with malware, says report
APKPure, an unofficial app store for Android platform, has been infected with malware that could install dangerous Trojans to your Android devices, says cybersecurity firm Kaspersky in a blog post.
APKPure is an app store for Android users that offers free or shareware apps. Android users are always advised to download apps only from the official Google Play Store as the veracity of the apps from unofficial sources being safe to install always stays doubtful. As per Kaspersky researchers, the APKPure app itself hasn’t passed its tests; the APKPure version 3.17.18 is “fitted with an advertisement SDK, one with an embedded Trojan dropper, which Kaspersky solutions detect as HEUR: Trojan-Dropper.AndroidOS.Triada.ap.”
When unpacked, the Trojan can wreak havoc on the device it gets installed on and can sabotage the system in multiple ways like “show ads on the lock screen, open browser tabs, collect information about the device” and has also the capability to download other malware. As per the researchers, there are a number of Trojans masquerading as the APKPure apps and which variant can attack your device depends on the Android version and the user installed security updates. For example, in devices running Android 8 or higher, the Triada Trojan can get downloaded. In older versions of Android, like 6 or 7, or Android devices which do not have the security updates installed, it could be the xHelper Trojan.
As per the report, APKPure has released an updated version 3.17.19 on its website. The description on the APKPure website says that the update “Fixed a potential security problem, making APKPure safer to use.” Kaspersky says that this version is safe to use.
APKPure is an app store for Android users that offers free or shareware apps. Android users are always advised to download apps only from the official Google Play Store as the veracity of the apps from unofficial sources being safe to install always stays doubtful. As per Kaspersky researchers, the APKPure app itself hasn’t passed its tests; the APKPure version 3.17.18 is “fitted with an advertisement SDK, one with an embedded Trojan dropper, which Kaspersky solutions detect as HEUR: Trojan-Dropper.AndroidOS.Triada.ap.”
When unpacked, the Trojan can wreak havoc on the device it gets installed on and can sabotage the system in multiple ways like “show ads on the lock screen, open browser tabs, collect information about the device” and has also the capability to download other malware. As per the researchers, there are a number of Trojans masquerading as the APKPure apps and which variant can attack your device depends on the Android version and the user installed security updates. For example, in devices running Android 8 or higher, the Triada Trojan can get downloaded. In older versions of Android, like 6 or 7, or Android devices which do not have the security updates installed, it could be the xHelper Trojan.
As per the report, APKPure has released an updated version 3.17.19 on its website. The description on the APKPure website says that the update “Fixed a potential security problem, making APKPure safer to use.” Kaspersky says that this version is safe to use.
All Comments (0)+^ Back to Top
Refrain from posting comments that are obscene, defamatory or inflammatory, and do not indulge in personal attacks, name calling or inciting hatred against any community. Help us delete comments that do not follow these guidelines by marking them offensive. Let's work together to keep the conversation civil.
HIDE