Judy Malware infects 36.5 million Android users, Google removes infected apps

May 29, 2017

May 29: A new malware named "Judy" has found in over 41 apps on the Google Play Store, and it has infected between 8.5 million to 36.5 million users. This is according to a report from security research firm Check Point, which discovered the malware and alerted Google. The search giant has started removing these infected apps from the Play Store.judy

However, "Judy Malware" infected apps have managed to research over 4.5 million to 18.5 million downloads on the Google Play Store. According to a blogpost by Check Point, Judy Malware is “auto-clicking adware,” and the firm spotted tapps developed by a company based in South Korea.

The company"s name is Kiniwini, which is mentioned on the Google Play Store as ENISTUDIO corp, say the researchers. This firm developers apps for Android, iOS. The auto-clicking adware would basically use these infected devices to create false clicks on ads, and thus generate revenue for the people behind this.

Check Point notes in the blog post, “The malicious apps reached an astonishing spread between 4.5 million and 18.5 million downloads. Some of the apps we discovered resided on Google Play for several years, but all were recently updated.

The researchers have also found other apps on the Google Play Store, which contain the malware, and these were developed by other companies. The research firm notes that code was present in an app since April 2016, so basically it managed to escape Google"s scrutiny for nearly an year.

So what exactly is "Judy" malware, and how does it work?

The idea with Judy malware is to create false clicks on ads, and thus boost revenue of these companies. Essentially the Judy malware bypassed Google Play Store"s protection, and the hackers created a “seemingly benign bridgehead app, meant to establish connection to the victim"s device, and insert it into the app store.”

After the app is downloaded, it manages to set up a connection with the Control and Command server, which delivers the actual malicious payload. This includes the “JavaScript code, a user-agent string and URLs controlled by the malware author,” explains the firm.

These URLs open a targeted website, and the code is used to click on banners from the Google ad tech. Each click mean payment for the creator of the malware from the website developer. It finds ads by looking for iframes, which have ads from Google ads infrastructure.

The Judy Malware fiasco shows that even Google Play Store tends to miss out on malware at times, as it clearly did in this case. Google says that their Play Store works around the clock to automatically identify malware and apps that can pose can risk to the user. But in the case of Judy malware, this is a big miss.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
June 8,2020

Washington DC, Jun 8: Astronomers acting on a hunch have likely resolved a mystery about young, still-forming stars and regions rich in organic molecules closely surrounding some of them.

They used the National Science Foundation's Karl G Jansky Very Large Array (VLA) to reveal one such region that previously had eluded detection and that revelation answered a longstanding question.

The regions around the young protostars contain complex organic molecules which can further combine into prebiotic molecules that are the first steps on the road to life.

The regions, dubbed "hot corinos" by astronomers, are typically about the size of our solar system and are much warmer than their surroundings, though still quite cold by terrestrial standards.

The first hot corino was discovered in 2003 and only about a dozen have been found so far. Most of these are in binary systems, with two protostars forming simultaneously.

Astronomers have been puzzled by the fact that, in some of these binary systems, they found evidence for a hot corino around one of the protostars but not the other.

"Since the two stars are forming from the same molecular cloud and at the same time, it seemed strange that one would be surrounded by a dense region of complex organic molecules and the other wouldn't," said Cecilia Ceccarelli, of the Institute for Planetary Sciences and Astrophysics at the University of Grenoble (IPAG) in France.

The complex organic molecules were found by detecting specific radio frequencies, called spectral lines, emitted by the molecules. Those characteristic radio frequencies serve as "fingerprints" to identify the chemicals.

The astronomers noted that all the chemicals found in hot corinos had been found by detecting these "fingerprints" at radio frequencies corresponding to wavelengths of only a few millimetres.

"We know that dust blocks those wavelengths, so we decided to look for evidence of these chemicals at longer wavelengths that can easily pass through dust," said Claire Chandler of the National Radio Astronomy Observatory, and principal investigator on the project.

"It struck us that dust might be what was preventing us from detecting the molecules in one of the twin protostars," added Chandler.

The astronomers used the VLA to observe a pair of protostars called IRAS 4A, in a star-forming region about 1,000 light-years from Earth. They observed the pair at wavelengths of centimetres.

At those wavelengths, they sought radio emissions from methanol, CH3OH (wood alcohol, not for drinking). This was a pair in which one protostar clearly had a hot corino and the other did not, as seen using the much shorter wavelengths.

The result confirmed their hunch. "With the VLA, both protostars showed strong evidence of methanol surrounding them. This means that both protostars have hot corinos. The reason we did not see the one at shorter wavelengths was because of dust," said Marta de Simone, a graduate student at IPAG who led the data analysis for this object.

The astronomers cautioned that while both hot corinos now are known to contain methanol, there still may be some chemical differences between them. That, they said, can be settled by looking for other molecules at wavelengths not obscured by dust.

"This result tells us that using centimetre radio wavelengths is necessary to properly study hot corinos," Claudio Codella of Arcetri Astrophysical Observatory in Florence, Italy, said.

"In the future, planned new telescopes such as the next-generation VLA and SKA, will be very important to understanding these objects," added Codella.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
June 27,2020

Mumbai, Jun 27: The Bombay High Court observed that COVID-19 patients from poor and indigent sections cannot be expected to produce documentary proof to avail subsidised or free treatment while getting admitted to hospitals.

The court on Friday was hearing a plea filed by seven residents of a slum rehabilitation building in Bandra, who had been charged ₹ 12.5 lakh by K J Somaiya Hospital for COVID-19 treatment between April 11 and April 28.

The bench of Justices Ramesh Dhanuka and Madhav Jamdar directed the hospital to deposit ₹10 lakh in the court.

The petitioners had borrowed money and managed to pay ₹10 lakh out of ₹12.5 lakh that the hospital had demanded, after threatening to halt their discharge if they failed to clear the bill, counsel Vivek Shukla informed the court.

According to the plea, the petitioners were also overcharged for PPE kits and unused services.

On June 13, the court had directed the state charity commissioner to probe if the hospital had reserved 20% beds for poor and indigent patients and provided free or subsidised treatment to them.

Last week, the joint charity commissioner had informed the court that although the hospital had reserved such beds, it had treated only three poor or indigent persons since the lockdown.

It was unfathomable that the hospital that claimed to have reserved 90 beds for poor and indigent patients had treated only three such persons during the pandemic, advocate Shukla said.

He further argued that COVID-19 patients, who are in distress, cannot be expected to produce income certificate and such documents as proof.

However, senior advocate Janak Dwarkadas, who represented the hospital, said the petitioners did not belong to economically weak or indigent categories and had not produced documents to prove the same.

A person who is suffering from a disease like COVID-19 cannot be expected to produce certificates from a tehsildar or social welfare officer before seeking admission in the hospital, the bench noted and asked the hospital to deposit ₹10 lakh in court within two weeks.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
January 7,2020

Washington, Jan 7: Facebook will ban deepfake videos ahead of the US elections but the new policy will still allow heavily edited clips so long as they are parody or satire, the social media giant said Tuesday.

Deepfake videos are hyper-realistic doctored clips made using artificial intelligence or programs that have been designed to accurately fake real human movements.

In a blog published following a Washington Post report, Facebook said it would begin removing clips that were edited--beyond for clarity and quality--in ways that "aren't apparent to an average person" and could mislead people.

Clips would be removed if they were "the product of artificial intelligence or machine learning that merges, replaces or superimposes content onto a video, making it appear to be authentic," the statement from Facebook vice-president Monika Bickert said.

However, the statement added: "This policy does not extend to content that is parody or satire, or video that has been edited solely to omit or change the order of words."

US media noted the new guidelines would not cover videos such as the 2019 viral clip -- which was not a deepfake -- of House Speaker Nancy Pelosi that appeared to show her slurring her words.

Facebook also gave no indication on the number of people assigned to identify and take down the offending videos, but said videos failing to meet its usual guidelines would be removed, and those flagged clips would be reviewed by teams of third-party fact-checkers -- among them AFP.

The news agency has been paid by the social media giant to fact-check posts across 30 countries and 10 languages as part of a program starting in December 2016, and including more than 60 organisations.

Content labeled "false" is not always removed from newsfeeds but is downgraded so fewer people see it -- alongside a warning explaining why the post is misleading.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.