New malware has circumvented the security of the Google Play Store and infected more than 20 applications with more than thousands of downloads worldwide.

On this occasion, the virus is called Joker and, as Aleksejs Kuprins writes on the website of the cybersecurity company CSIS, it is specifically designed to silently register its victims on some subscription services. If you don’t pay attention to credit card charges, you could give your bank account a good scare.

Usually Joker can subscribe the victim on services for a few dollars a month so the victim does not realize the carge in his account, or once noticed, he just cancel the subscription but does not file a police report.

This works by automating the necessary interaction with the subscription offer website, entering the operator’s offer code, and then waiting for an SMS message with a confirmation code. The next thing Joker does is extract the code using regular expressions and finally the malware sends that extracted code to the offer website to authorize the subscription.

For its part, Google has already removed the affected applications from its store, but by the time it did so they had already accumulated more than 472,000 downloads. This is the list of tools that if you have installed in any of your devices, you must remove, for greater security:

  • Advocate Wallpaper
  • Age Face
  • Altar Message
  • Antivirus Security – Security Scan
  • Beach Camera
  • Board picture editing
  • Certain Wallpaper
  • Climate SMS
  • Collate Face Scanner
  • Cute Camera
  • Dazzle Wallpaper
  • Declare Message
  • Display Camera
  • Great VPN
  • Humour Camera
  • Ignite Clean
  • Leaf Face Scanner
  • Mini Camera
  • Print Plant scan
  • Rapid Face Scanner
  • Reward Clean
  • Ruddy SMS
  • Soby Camera
  • Spark Wallpaper

It was in June of this year when Joker started infecting these applications, so if any of them have been used during the summer, it is advisable to check the credit card or Paypal account associated with Google Play, to make sure there are no unexpected subscriptions.


Please enter your comment!
Please enter your name here