According to a report by Bleeping Computer, security researchers have identified 10 App “adware” on the App Store involved in advertising fraud. This means that the apps have been designed with the goal of generating revenue by posing as legitimate iOS apps and “bombarding” users with a series of advertisements. So let’s see what applications it is.
10 iOS apps involved in advertising fraud identified by security researchers
Another step towards the safety of users of Apple devices. HUMAN’s Satori Threat Intelligence team identified a dozen applications involved in a advertising fraud called “Scilla”. As far as we know, all compromised iOS apps have been removed from the App Store, but any of you who have installed them would do well to delete them. Here are which applications we are talking about:
- Loot the Castle – com.loot.rcastle.fight.battle (id1602634568)
- Run Bridge – com.run.bridge.race (id1584737005)
- Shinning Gun – com.shinning.gun.ios (id1588037078)
- Racing Legend 3D – com.racing.legend.like (id1589579456)
- Rope Runner – com.rope.runner.family (id1614987707)
- Wood Sculptor – com.wood.sculptor.cutter (id1603211466)
- Fire-Wall – com.fire.wall.poptit (id1540542924)
- Ninja Critical Hit – wger.ninjacriticalhit.ios (id1514055403)
- Tony Runs – com.TonyRuns.game.
From what has been discovered, the apps that committed the fraud were using a ID bundle which did not match their publication name, making it appear to advertisers that the impressions came from one most profitable software category. On the surface, they mimicked CTV-based apps, with IDs frequently changing to evade detection. And if the iOS Apps reported are only a dozen, the Google Play Store reported at least 70, which is a much more serious problem on Android devices.
Apple’s App Store review process was able to reduce the severity of the problem on iOS devices, but there are still applications that get out of control. Security researchers suggest smartphone users should look for rapid battery drain and increased internet data usage to detect apps that are fraudulently using ads in the future.