<ul><li>There’s unsurprisingly a flurry of <keyword id="12159486" type="General" weightage="20" keywordseo="squid-game" source="Orion">Squid Game</keyword> apps on the Play Store and one with malware too.</li><li>The app posed as a Squid Game wallpaper but instead had <keyword id="8088018" type="General" weightage="20" keywordseo="joker-malware" source="Orion">Joker malware</keyword> in it.</li><li>Google was quick to remove the app but it had received more than 5,000 downloads.</li></ul>Squid Game is Netflix's biggest show ever and has been watched by over 142 million users worldwide. The dystopian Korean series has reportedly raked in <a href="https://www.businessinsider.in/entertainment/news/netflixs-squid-game-will-generate-nearly-900-million-for-the-company-despite-costing-only-21-million-to-make-reports-say/articleshow/87082054.cms">$900 million </a>when it took only $21.4 million to produce. Squid Game has won hearts over and the craze is undeniably visible all over the internet with the show’s merchandise, memes, and even real-life games. There are also a bunch of unofficial <a href="https://www.businessinsider.in/tech/news/squid-game-masks-in-india-and-fans-around-the-world/articleshow/86939519.cms">Squid Game</a> apps on the Google Play Store out of which one was discovered to be filled with malware. This Android app disguised itself as a Squid Game wallpaper app but is instead filled with malware, according to a <a href="https://www.forbes.com/sites/thomasbrewster/2021/10/19/squid-game-malware-on-google-play/?sh=72692c4f4912">report </a>by Forbes. The app was <a href="https://twitter.com/ReBensk/status/1450129699007459336">first discovered</a> by a Twitter user named @ReBensk. It was later investigated by ESET malware researcher Lukas Stefanko who found that the app can lead to malicious ad fraud and unwanted SMS subscriptions. Google thankfully removed the app from the Play Store upon being notified but it was reportedly downloaded by over 5,000 users, the report added. The researcher also found that hackers used the infamous Joker malware in this app. <cmsannotation type="cmsannotation" annotationid="Joker strikes again" comment="subhead" text="Joker strikes again">Joker strikes again</cmsannotation> Anyone familiar with Android malware must have definitely heard about the<a href="https://threatpost.com/updated-joker-malware-android-apps/167776/"> Joker malware</a>. It's the one that has been lurking on Android phones since 2017 and finding new ways to infiltrate devices. Google even set up a dedicated team to fish out apps with Joker malware and have so far removed more than 1,800 infected Android apps from the Play Store. <cmsannotation type="cmsannotation" annotationid="Not the only Squid Game app" comment="subhead" text="Not the only Squid Game app">Not the only Squid Game app</cmsannotation> This malware-infused Squid Game app has been removed from the Play Store but there are still tons of fake apps still on the Play Store. Just a quick search on the Play Store will pull search results of multiple Squid Game apps where some offer show-like games or wallpapers. Some of these apps checked by Stefanko didn’t have any malware but did contain a good number of ads. As for the rest of the apps, it isn’t confirmed if they have malware but considering none of the apps are official, it's important to be careful before downloading them on your phone. SEE ALSO: <a href="https://www.businessinsider.in/entertainment/news/squid-game-vip-actor-says-mockery-of-their-acting-skills-has-been-a-challenge/articleshow/87163398.cms" data-type="tilCustomLink">'Squid Game' VIP actor says mockery of their acting skills has been 'a challenge'</a> <a href="https://www.businessinsider.in/entertainment/news/netflixs-korean-series-my-name-is-surging-in-popularity-following-the-success-of-squid-game/articleshow/87140606.cms" data-type="tilCustomLink">Netflix's Korean series 'My Name' is surging in popularity following the success of 'Squid Game'</a>

Fake Squid Game app with malware found on Google Play Store, downloaded over 5,000 times

Cybersecurity researchers on Wednesday said they discovered six apps on Google Play store with over 2 lakh downloads in total that were infected with the infamous <keyword id="8088018" type="UNKNOWN" weightage="20" keywordseo="Joker-Malware">Joker malware</keyword>. The apps are: Convenient Scanner 2, Safety AppLock, Push Message-Texting &amp; SMS, Emoji Wallpaper, Separate Doc Scanner and Fingertip GameBox, reports cyber security firm Pradeo. "The infected applications have now been deleted from Google Play, but are still installed on the devices of their users," Pradeo said. <keyword id="33109" type="ENTERTAINMENT" weightage="20" keywordseo="Joker">Joker</keyword> is a malicious bot (categorised as Fleeceware) whose main activity is to simulate clicks and intercept SMS to subscribe to unwanted paid premium services unbeknownst to users. By using as little code as possible and thoroughly hiding it, Joker generates a very discreet footprint that can be tricky to detect. In the last year, the malware was found hiding in hundreds of apps. "Users are advised to immediately delete them from their device to avoid fraudulent activities," the cyber security firm advised. Google has removed over 1,700 apps containing Joker malware from the Play Store since 2017. In July this year, researchers at cybersecurity firm Check Point discovered a new variant of the Joker Dropper and Premium Dialer spyware in Google Play. Hiding in seemingly legitimate applications, this updated version of Joker was able to download additional malware to the device, which subscribes the user to premium services without their knowledge or consent. Joker, one of the most prominent types of malware for Android, keeps finding its way into Google's official application market as a result of small changes to its code, which enables it to get past the Play store's security and vetting barriers. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/google-blocked-an-average-of-18-million-daily-malicious-coronavirus-messages-to-gmail-users-in-the-past-week-as-hackers-try-to-capitalize-on-fear-and-less-secure-remote-work-setups/articleshow/75205021.cms">Google blocked an average of 18 million daily malicious coronavirus messages to Gmail users in the past week as hackers try to capitalize on fear and less secure remote-work setups</a>

Google removes 6 malicious apps infected with Joker malware

<ul><li>There has been a surge in online malware attacks as new players enter <keyword id="154740" type="PERSON" weightage="20" keywordseo="Cyber-warfare">cyber warfare</keyword>, including cybercriminals from India. </li><li>Fairly new to the landscape, these cybercriminals modify existing malware to launch their attacks. </li><li>Patchwork is one such Indian hacker that has been active. </li></ul>Cyberattacks are escalating, and the coronavirus pandemic may have played a role, but is not the only reason behind this surge. Remote working may have created an abundance of targets, but new players — including cybercriminals from India — entering the field is making it increasingly crowded. Former British Intelligence researcher and founder of cybersecurity firm Cyfirma, Kumar Ritesh told Business Insider that not only has this led to a surge in hacking attempts, but <keyword id="9770830" type="UNKNOWN" weightage="20" keywordseo="old-malware">old malware</keyword> is also making a comeback like never before. These ‘copy-paste’ hackers take the old source code of a virus or malware and repurpose it to launch an attack. “New nations who are joining the game quite late have suddenly skewed the whole cyber warfare landscape in a different proportion,” said Ritesh. Old malware makes a comeback More sophisticated and experienced cybercriminals, like the Russians, North Koreans, or the Chinese, have the tools required to create their new malware. New players, on the other hand, don’t have a lot of capabilities, according to Ritesh. Instead of creating new code, they modify what already exists. “A three-year-old malware which was nowhere in the game has come back all over again in the last four to five months,” said Ritesh. In the last four months, more than 130 new variants of the malware have been spotted by DeCYFIR, Cyfirma’s threat prediction software. Dharma ransomware, which first reared its head in 2016, was spotted attacking small and medium businesses. Many variations of the source code have been dumped online or can be found for sale, according to cybersecurity firms Sophos. Conficker, a 12-year-old malware, also made a comeback. Exploiting weaknesses in Internet of Things (IoT) devices, the malware has inflicted most of its damage in the healthcare sector. Joker, another old Malware found making the rounds on the Google Play Store by cybersecurity firm Check Point. Introducing Patchwork There is no better example of ‘copy-paste’ hackers than one of the more prominent Indian hacker groups, Patchwork. Back in 2016, the Patchwork group of hackers ripped code and tolls from Github and around the Dark New to build their kit. They were able to crack through <a href="https://www.theregister.com/2016/07/08/copy_paste_slacker_hackers_pop_corp_locks_in_ode_to_stolen_code/">2500 corporates and government agencies.</a> In 2018, they resurfaced when cybersecurity firm <a href="https://securityonline.info/volexity-indian-apt-hacker-organization-patchwork-target-us-think-tanks/">Volexity</a> caught them trying to break into US think tanks. Palo Alto Networks also saw an uptake in their activity against South Asian countries, including Pakistan. SEE ALSO: <a href="https://www.businessinsider.in/business/corporates/news/tech-mahindra-hcl-tech-wipro-and-likes-are-hoping-global-5g-race-resumes-next-year-bringing-some-large-deals-before-that/articleshow/77583638.cms">Tech Mahindra, HCL Tech, Wipro and likes are hoping global 5G race resumes next year⁠ — bringing some large deals before that</a> <a href="https://www.businessinsider.in/international/news/gaza-strips-only-power-plant-may-run-out-fuel-in-the-next-24-hours-following-israel-border-shut-warns-expert/articleshow/77584765.cms">Gaza Strip's only power plant may run out fuel in the next 24 hours following Israel border shut, warns expert</a> <a href="https://www.businessinsider.in/tech/apps/news/the-heat-is-on-mark-zuckerberg-in-india-as-facebook-and-whatsapp-incur-the-ire-of-modis-rivals/articleshow/77575358.cms">The heat is on Mark Zuckerberg in India as Facebook and WhatsApp incur the ire of Modi's rivals</a>

Old malware makes a comeback as new players enter cyber warfare

<ul><li>A new <keyword id="6360618" type="UNKNOWN" weightage="20" keywordseo="data-leak">data leak</keyword> shows that 4 lakh Indian debit and credit cards of Indian banking customers are for sale on the <keyword id="1929208" type="PERSON" weightage="20" keywordseo="dark-web">dark web</keyword>. </li><li>The report by Singapore-based Group IB claims that the cards are being sold for $9 apiece with the overall value of the database estimated to exceed $4.2 million. </li><li>Group IB believes that the details were likely stolen by tracking online transactions, not by skimming details from cards used at ATMs. </li></ul>Another four lakh credit and <keyword id="6356475" type="UNKNOWN" weightage="20" keywordseo="debit-card">debit card</keyword> details are up for sale on the dark web, and 98% of them belong to customers from Indian banks. A report by Singapore-based security firm <a href="https://www.group-ib.com/media/india-banks-cards/">Group IB</a> claims that the payment details were up for sale on Joker’s Stash — a secretive portal on the dark web for hackers to sell card dumps. “The underground market value of the database is estimated at more than $4.2 million,” said the report stating that each card was being sold for $9 apiece. The 461,976 payment records include exposed card numbers, expiration dates, and CVV codes. Others have additional information like cardholders’ full names, emails, phone numbers and addresses. The data can be used to make fraudulent transactions, especially if the accompanying phone numbers is included. The cybersecurity firm was unable to determine the source of the leak. However, they have passed on the information to India’s Computer Emergency Response Team (CERT-In) so that they can take the necessary steps. The database is named “INDIA-BIG-MIX” and was uploaded on 5 February 2020. The data was likely compromised online According to Group IB, the information found in the database was likely compromised online. That’s what makes it different from the data leak from last year. “In the current case, we are dealing with so-called fullz… with the use of phishing, malware or JS-sniffers,” said Group IB. In October 2019— when the same portal was found to be <a href="https://www.businessinsider.in/india/news/bank-details-of-1-3-million-indians-is-up-for-sale-on-the-dark-web/articleshow/71829700.cms">selling the debit and credit card data of 1.3 million Indian banking customers</a> — the firm believed that the information was stolen from magnetic stripes on cards. “Early data analysis suggests the card details may have been obtained via skimming devices, installed either on ATMs or point of sale (PoS) systems,” said the Group IB’s earlier report. See also: <a href="https://www.businessinsider.in/india/news/bank-details-of-1-3-million-indians-is-up-for-sale-on-the-dark-web/articleshow/71829700.cms">Bank details of 1.3 million Indians is up for sale on the dark web</a> <a href="https://www.businessinsider.in/tech/news/biggest-data-breaches-of-2019-to-affect-india/articleshow/72465865.cms">Biggest data leaks of 2019 that hit Indians</a> <a href="https://www.businessinsider.in/policy/news/rbis-new-cybersecurity-guidelines-are-pushing-indias-1574-urban-cooperative-banks-to-bring-digital-services-up-to-snuff/articleshow/72381380.cms">RBI's new cybersecurity guidelines are pushing India's 1,574 urban cooperative banks to bring digital services up to snuff</a>

4 lakh Indian debit and credit cards are selling for $9 apiece on the dark web

In a bid to make people safe from spam and scam calls, <keyword id="6355629" type="DEFINITION" weightage="20" keywordseo="google">Google</keyword> has announced a new feature named <keyword id="9470829" type="COMPANY" weightage="20" keywordseo="verified-calls">Verified Calls</keyword> on its Phone app. It comes pre-loaded on several Android phones and will be available for download later this week on more Android devices in select countries, including India. The ‘Verified Calls' shows the caller's name, logo, reason for calling and a verification symbol indicating that the business has been authenticated by Google. "This is done in a secure way and Google doesn't collect or store any personally identifiable information after verification," the company said in a statement on Tuesday. Verified Calls is initially rolling out in the US, Mexico, Brazil, Spain and India, with more countries to come. A 2019 report by the US Federal Trade Commission (FTC) found that phone calls were the number one way people reported being contacted by scammers. While most people said they hung up on those calls, those who lost money reported a median loss of $1,000. "We've been piloting Verified Calls for a few months, and the early results indicate that it improves the likelihood of someone answering a call," Google said. For instance, banks calling to alert a customer about a possible fraudulent transaction can increase answer rates by stating the call reason. "We also have existing partners — including Neustar, Five9, Vonage, Aspect, Bandwidth, Prestus, Telecall, and JustCall — ready to help brands improve their answer rates by using Verified Calls," Google said. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/google-removes-6-malicious-apps-infected-with-joker-malware/articleshow/77890027.cms">Google removes 6 malicious apps infected with Joker malware</a>

Google introduces Verified Calls to help identify business callers in India

Data is the new gold and there are a lot of thieves who are stealing it. From time to time, debit card and credit card information is stolen as well. Earlier this month, a <a href="https://www.businessinsider.in/tech/news/4-lakh-indian-debit-and-credit-cards-are-selling-for-9-apiece-on-the-dark-web/articleshow/74028856.cms">report</a> revealed that over 4 lakh Indian debit and credit cars were being sold online, for $9 each. This is not the only instance when Indian debit and <keyword id="6387037" type="UNKNOWN" weightage="20" keywordseo="credit-cards">credit cards</keyword> were spotted on the <keyword id="1929208" type="PERSON" weightage="20" keywordseo="dark-web">dark web</keyword>. Last year, Group-IB <a href="https://www.group-ib.com/media/biggest-card-database-ever/">found</a> over 13 lakh Indian debit and credit cards on sale on Joker’s Stash, a dark web underground card shop. You must be wondering how debit and credit cards end up on the dark web and why. In this post, we will explain how your financial data ends up on the dark web and how it is misused. How do debit and credit cards end up on the dark web? There are several ways how your debit and credit card information could be stolen and sold on the dark web. The most common methods include hacking into businesses, card skimming, installing malware on your devices and using fake websites. As per Group-IB, the recent breach of “data is likely to have been compromised online — with the use of phishing, malware, or JS-sniffers.” What happens when your debit and credit card info reaches the dark web? When card information is stolen, the thieves make a ‘database’ or a ‘dump’ of the information to make a sale. The card details are sold with the necessary details to make the purchase, such as the card number, card holder’s name and the CVV number. It must be noted that while the transactions that are routed through Indian payment gateways require a second layer of authentication in the form of OTPs, this layer is not mandatory for payment gateways outside of the country. In most instances, the card number, CVV and the expiration date is enough to complete a transaction. This allows your stolen card to be used by scammers for completing unauthorized transactions. Stolen cards are often used to purchase prepaid cards and other online services as a lack of address makes it harder to trace, allowing the person to use the card for a longer period. Some thieves also use the cards to make small insignificant purchases over a long period of time to avoid getting caught. See also: <a href="https://www.businessinsider.in/biggest-data-breaches-of-2019-to-affect-india/articleshow/72465865.cms">Biggest data leaks of 2019 that hit Indians</a> <a href="https://www.businessinsider.in/tech/news/4-lakh-indian-debit-and-credit-cards-are-selling-for-9-apiece-on-the-dark-web/articleshow/74028856.cms">4 lakh Indian debit and credit cards are selling for $9 apiece on the dark web</a> <a href="https://www.businessinsider.in/bank-details-of-1-3-million-indians-is-up-for-sale-on-the-dark-web/articleshow/71829700.cms">Bank details of 1.3 million Indians is up for sale on the dark web</a>

You Searched For "joker malware" and got 6 results

Fake Squid Game app with malware found on Google Play Store, downloaded over 5,000 times

Marcia Sekhose

Google removes 6 malicious apps infected with Joker malware

IANS

Old malware makes a comeback as new players enter cyber warfare

Prabhjote Gill

4 lakh Indian debit and credit cards are selling for $9 apiece on the dark web

Prabhjote Gill

Google introduces Verified Calls to help identify business callers in India

IANS

Here is what happens when your credit/debit card number, name and CVV end up on the dark web

Rounak Jain