Security researchers find 10 Apple App Store apps involved in advertising fraud

CTOnews.com, Sept. 27, according to a report by Bleeping Computer, security researchers have found 10 apps on App Store that are involved in advertising fraud. These apps generate revenue by impersonating legitimate apps and showing a large number of ads to iPhone users.

HUMAN's Satori Threat Intelligence team found that the apps were part of an advertising fraud campaign they called "Scylla". This is the third wave of fraud discovered since August 2019, and Apple has been fighting it. At present, these apps have been removed from Apple's App Store, and CTOnews.com partners should also pay attention to them if they are installed.

Loot the Castle-com.loot.rcastle.fight.battle (id1602634568)

Run Bridge-com.run.bridge.race (id1584737005)

Shinning Gun-com.shinning.gun.ios (id1588037078)

Racing Legend 3D-com.racing.legend.like (id1589579456)

Rope Runner-com.rope.runner.family (id1614987707)

Wood Sculptor-com.wood.sculptor.cutter (id1603211466)

Fire-Wall-com.fire.wall.poptit (id1540542924)

Ninja Critical Hit-wger.ninjacriticalhit.ios (id1514055403)

TonyRuns-com.TonyRuns.game

These advertising fraudulent applications use bundled ID that does not match their release names, and the ID is often changed to evade detection.

It is worth noting that researchers found 10 advertising fraud apps on Apple's iOS App Store and more than 70 on Google's Play Store.

Security researchers suggest that mobile phone users should pay attention to applications that consume a lot of power and use a lot of traffic, and avoid installing apps from suspicious developers.

Full report: click here to view