ThreatTrack Security: QR Codes Deliver Boxer Malware
ThreatTrack Security Labs researchers recently came across a Web site hosting fake Android apps that leads users to page where they can purportedly download games. Users who visit a game page will see a description along with a QR code that redirects them to a fake download page.
Notably, the researchers found that the URLs can only be accessed from specific locations in the world -- users outside those locations are simply redirected to Google. In one example, the researchers visited the page for a fake Angry Birds Space app -- the QR code points to a fake APK, which is downloaded without requesting user permission. Other page for games ranging from Bloons to Modern Combat 4: Zero Hour also lead to similar APKs.
Notably, the researchers found that the URLs can only be accessed from specific locations in the world -- users outside those locations are simply redirected to Google. In one example, the researchers visited the page for a fake Angry Birds Space app -- the QR code points to a fake APK, which is downloaded without requesting user permission. Other page for games ranging from Bloons to Modern Combat 4: Zero Hour also lead to similar APKs.
No comments: