A recently identified trojan porn clicker is still infecting apps on Google Play.

Lately we informed you how a fake Dubsmash application has been uploaded to Google Play Store at least nine times, which have tens of thousands of installs. This porn clicker Trojan, which we detect as Android/Clicker, has once more become available for download from Play Store. After we notified Google and published an article about these fake Dubsmash Trojans, we discovered other fake Dubsmash versions being uploaded again infected with the same porn clicker. We detected yet another 51 Trojan porn clickers accessible for the users to download. Four of them had more than 10,000 installs and one of them had more than 50,000 installs.

This 51 together with 9 fake Dubsmash we reported in the previous article users were able to download 60 different Trojan clicker applications from Google Play. These Trojan clickers were downloaded at least 210,000 times in the last three months. In the weeks after our article was published, these apps were installed more than 106,000 times.

This time not only were fake versions of Dubsmash uploaded by the same developer, we also found Download Manager, Pou 2, Clash of Clans 2, Subway surfers 2, Subway surfers 3, Minecraft 3, Hay Day 2, various game cheats and Video Downloaders being infected with the same Trojan Clicker.

ESET is still seeing occurrences of this infiltration on Google Play and, after more than a month, these fake Trojan Clickers are still managing to evade Google’s Bouncer malware filter and potentially exposing millions of users to risk.

Interestingly, none of the fake applications will add a Dubsmash app icon to the app menu after installation. Instead the malicious apps pretend to be arcade games like Flappy Birds Family, board games or system applications.

Following ESET’s notification, Google has pulled the malware from the Play Store and also reports some of them as potentially harmful applications using its built-in security service.

Conclusion

Even though the malicious applications were available for download for at most a week, tens of thousands of people still installed them. Hopefully, Google is doing its best to fix this issue and find a way to prevent the developers of these porn clickers from publishing them to the Play Store. To reduce the risk from malicious apps that may have slipped through Google’s filtering, we advise Play Store customers to take careful note of reviews by other customers, and to ensure that their security software is kept up to date.

More information

App Name Uploaded Installs Dubsmash 2 27 May 2015 0 - 10 Dubsmash V3 28 May 2015 10,000 – 50,000 Dubsmash 2 30 May 2015 10,000 – 50,000 Dubsmash 2 2 June 2015 0 - 10 Dubsmash 2 4 June 2015 0 - 10 Dubsmash 3 9 June 2015 0 - 10 Download Manager 9 June 2015 0 - 10 Dubsmash 2 10 June 2015 0 - 10 Poo Video Downloader 13 June 2015 0 - 10 Dubsmash 2 14 June 2015 10 - 50 Dubsmash 2 17 June 2015 10,000 – 50,000 Dubsmash 3 19 June 2015 1,000 – 5,000 Dubsmash 2 20 June 2015 10 - 50 Best : Dubsmash 3! 1 July 2015 0 - 10 Komboatic 1 July 2015 0 - 10 Best : Dubsmash 4 July 2015 10,000 - 50,000 C l a s h o f C l a n s 2 4 July 2015 100 - 500 Cheats for Clash of Clans 6 July 2015 5,000 - 10,000 Dubs Mash 2 6 July 2015 1,000 - 5,000 Cheats & Trucos: Gta 5 6 July 2015 10 – 50 Maps & Guide: GTA 5 6 July 2015 100 – 500 Subway Surfers 2 7 July 2015 50,000 – 100,000 Best : Dubsmash 7 July 2015 1,000 – 5,000 Clash of Clans 2 8 July 2015 0 - 10 Pou 2 8 July 2015 5,000 - 10,000 Subway Surfers 3 8 July 2015 1,000 - 5,000 Followers for Instagram 8 July 2015 10 - 50 MayHayda 8 July 2015 500 - 1,000 MayHada 8 July 2015 500 - 1,000 Man Kaptasi 8 July 2015 100 - 500 Smash Hit 2 9 July 2015 500 – 1,000 Miviki yanki 10 July 2015 1,000 – 5,000 Flipagram 2 10 July 2015 100 – 500 Koday 10 July 2015 0 - 10 Deer Hunter 2015 10 July 2015 0 - 10 Minecraft 3 13 July 2015 0 - 10 Red Ball 6 13 July 2015 50 - 100 Archery Master 4 13 July 2015 0 - 10 Exploration Lite 2 14 July 2015 100 - 500 Traffic Racer 2 14 July 2015 50 - 100 Hitman Sniper 2 14 July 2015 50 - 100 Batman 2 14 July 2015 10 - 50 The Walking Dead 2 14 July 2015 0 - 10 Moto Loko 2 14 July 2015 0 - 10 Rally Racer 2 14 July 2015 0 - 10 Dr Driving 2 14 July 2015 100 - 500 Survivor Heroes 2 15 July 2015 0 - 10 Dubsmash 2 15 July 2015 10 – 50 Hay Day 2 15 July 2015 0 -10 Subway Surfers 2 19 July 2015 10 - 50 Dubsmash 2 19 July 2015 10 - 50