*A widespread ad fraud campaign has infiltrated the Google Play Store, compromising more than 200 Android applications in what researchers have labeled the SlopAds operation. The scheme manipulates advertising systems while slowing down user devices and generating illicit revenue for cybercriminals, The Express reports.
The Satori Threat Intelligence and Research Team exposed the attack after discovering 224 infected applications that had been installed over 38 million times across 228 countries and territories. “HUMAN’s Satori Threat Intelligence and Research Team has uncovered and disrupted a sophisticated ad fraud and click fraud operation dubbed SlopAds,” security experts said. “The threat actors behind SlopAds operate a collection of 224 apps and growing, collectively downloaded from Google Play more than 38 million times across 228 countries and territories.”
The malicious applications employed steganography—a technique for hiding data within other files—to embed fraudulent code without detection. “These apps deliver their fraud payload using steganography and create hidden WebViews to navigate to threat actor-owned cashout sites, generating fraudulent ad impressions and clicks,” researchers explained.
Google has purged all identified malicious apps from the Play Store to prevent additional downloads. Users who previously installed any of the compromised applications will see notification prompts urging immediate removal. Android users can activate Google’s Play Protect feature, which actively monitors for suspicious behavior and blocks downloads associated with known threats like SlopAds.
Scroll to continue reading
The tech giant stressed the broader implications of fraudulent advertising activity on mobile platforms. “Ad interactions generated for the purpose of tricking an ad network into believing traffic is from authentic user interest is ad fraud, which is a form of invalid traffic,” Google stated, warning that such operations “lead to long-term loss of trust in the mobile Ads ecosystem.”
Security professionals recommend promptly deleting any flagged applications to protect device performance and personal information.
MORE NEWS ON EURWEB.COM: Fake WhatsApp and TikTok Apps Are Spreading New Android Spyware
Sign up for our Free daily newsletter HERE.
