Recently, cybersecurity experts from the company Doctor Web found nearly 200 games containing the Trojan “Android.Cynos.7.origin” inside.
This “Android.Cynos.7.origin” Trojan was found in 190 games and had about 9 million 3 hundred downloads. This Trojan is specially designed to get data like cell phone numbers and other data to the person behind.
Collected Data
All these Trojan games are mainly aimed at children because children are an easy target to reach because children are not aware of this malicious, harmful so it is easy to get data can be stolen. After the user grants permission to these games, data is collected and sent to a remote server.
Collected data:
- Your phone number
- Device location based on GPS, mobile data and Wifi hotspot
- The information of the mobile network (sim): network code, country code, GSM ID, international GSM area code.
- Device parameters.
- Some of its versions are quite functional: they send expensive SMS, block incoming SMS, download and launch additional modules, and download and install other applications. The main function of the version discovered by malware analysts is to collect information about users and their devices and display advertisements.
Affected Apps
There are about 190 games on Huawei AppGallery with built-in trojans in several categories including:
- Simulators
- Platforms
- Arcades
- Strategies
- Shooters and others
In total, more than 9 million users have downloaded these games. Some of these games target Russian users, while others target Chinese or international audiences.
Currently, all games infected with this Trojan have been removed by Huawei from the AppGallery application store. However, if you are using a Huawei phone or download a game on Huawei’s app store or download an apk and accidentally the apk provider gets it from AppGallery and you are not sure if you are infected with this Trojan or not, you can see some of the games that are stuck below:
- “[Команда должна убить боеголовку]” with over 8000 installs.
- “Cat game room” with more than 427000 installs.
- “Drive school simulator” with more than 142000 installs.
- “[快点躲起来]” with over 2000000 installs.
If you want a full list of apps infected with this trojan then you can click here to check and if your phone has it installed then remove it.