Millions of Android devices have been infected by a new class of malware that disguises itself as dozens of arcade, shooter, and strategy games on Huawei’s App Gallery marketplace to steal device information and victims’ mobile phone numbers.

Researchers classified the trojan as “Android.Cynos.7. origin,” because the malware is a modified version of the Cynos malware. Of the total 190 rogue games identified, some were designed to target Russian-speaking users, while others were aimed at Chinese or international audiences.

Advertisements

After the installation, completed the apps prompted the victims for permission to make and manage phone calls, using the access to harvest their phone numbers along with other device information such as geolocation, mobile network parameters, and system metadata.

  • User mobile phone number
  • Device location based on GPS coordinates or the mobile network and Wi-Fi access point data
  • Various mobile network parameters, such as the network code and mobile country code; also, GSM cell ID and international GSM location area code
  • Various technical specs of the device
  • Various parameters from the trepanised app’s metadata

At first glance, a mobile phone number leak may seem like an insignificant problem. Yet, it can seriously harm users, especially given the fact that children are the games’ main target audience.

Advertisements

Even if the mobile phone number is registered to an adult, downloading a child’s game may highly likely indicate that the child is the one who using the mobile phone. It is very doubtful that parents would want the above data about the phone to be transferred not only to unknown foreign servers, but to anyone else in general. While the malware-laced apps have since been purged from the app stores, users who have installed the apps on their devices will have to manually remove them to prevent further exploitation.

Indicators of Compromise

Application NameSHA-1 Hash
3D City Hunting8b1de0c1fdea45ff8f4ae250307c0a8f69c3d426
3D Cartoon man Parkourf70f195fd9deffbde2ee812c93b327d07e18443f
3D City Wild Racingfda4bc7b3883b3db3df13b0e1b07ad53bbe22a4d
3d Man action rune6024ce99966f4ecaff0efdae7781d9d448b2c79
Ace of sky heroe5ed0eda9513f41b5c9ebd7b14529180a4e5d822
Acrobatics diving trainingd4c1b4b2a65279b768338f2c0d12b695572b101b
Adventures of Magical Girl532b2d05f528ee68a1f89d02fa2477a8fac7c88b
Airplane masterfec03ced8741a8241fcb5f272ede566a634ba539
All-Star Basketball Championshipf4b9517b19f8c4cee7295f653dca4af8f9e62a13
almighty carry companyd4a1e722adda57f72f9daafdfd338630b48ae55f
Ancient escape5599dfea0b274e4edbfdabad72d68e271b99e72d
Anti-terrorism actionsaeb5f642538bfdf6b2a8eb5cf3214035a634506f
Anti-terrorist police battleb1112a4847c4006f126f0a5ab08b191df039adb7
Ants survive in the wildernessfb1b5402a51ebc00b17670d6e6b49dba28d36704
Armed air attack at seaf05119b12fc28aca89f48b5a939d6e1928c04bc6
Armed escort prisoners7bf6516b2176363de9d7a7993445ede9f697260d
Armed shooting raidc4f1405bba22826a69e94ef20763cb664bc3b44c
Armed zombie Tower Defensec30291b34ec74128196612b0a80034424de2ea67
Army car transport prisonersf56151b7fd4096f73574717075f6c08e32ff4765
Assassination Sniperfca6cb15168ac7b256da4bbb442cf93050981b61
Assassination time 3D78e48efac48d7ed9ea53a7a7df294da0a97de066
Battle of tanksc80fee5ffccf9ce85ff15b7d085d700ae70aef98
Battlefield assault team4a4abab1e69ef629c1c622fd3be280c013e4e9fd
Beach ambulanceb860d5303d8921fed08c5e374483ac127ee2385e
Beach Emergency teamb936c97eb91bf6071aa38ead5fb5b8ce11d9a0c1
Beach rescue driving38ab82696f45fdf52c04d3ba760e8b752b07df6d
Beat the buddya4dbe44e0cbef5db32651050189848e9207e28ed
Brave Ninja saves Princess1a17dd8b6bb1a08ab53b2d096535d251a8d7a8cb
Bumper Car Arena81ae7a0fac2f385b2984669356d92cf7e807fbb7
Busy road driving7795827b9feb3e6d8a86f30a48686d3fe816ab30
Car battle ground6c748786e3d18321b7e2f6c64b578ecb310d5b82
Car destruction war195bad41d7c0cee3a388ec072353e9b62c923c67
Car drive master664e47cebb0464339d5e75efb4279c1fa86e131a
Car merge shootingf57efc2ee390c43d42dde0e6dde81a2c5dd1958b
Car shooting defend war6cc4c02dc12afeadd1e1c41f5a55f9be35aeca72
Cat adventures18558dca2734d6b098d91d570e0ca13623e0a851
Cat cute diaryaa2f1784fe24b564fdeb577a340d439661db1571
Cat game room79ddb48ac25eb392c9e92dc44d32bbc522e19fae
City car parking test30abca107e63b3858bc661f27e2ab56ee3fbb471
City driving mastercb7d260684c212c04c39bc96e6e7c4b91c62b516
City Fire Hero8cce3b7c41a185919c4e7735176087b2e503741e
City luxury car racingcfc35d28dad612e515a5f90a91fc7b33bcf7d7d6
City mad driftfac857b82698fbfe0703a589547b786a15550d30
City moto racing 3D24f9cec9090f89511ef832f0fc91f03becfd068e
City moto speed battle8b92f9eb20ecec1b2ebb64ad182bc03978c7914c
City Overtake Racingdbda535b5f4b4ad0be5beff735a3d874fa928a83
City police rundee6c5efc0c742d98fceec5a7db459e85b45133f
City props drag racing38d90ca290c3e9f4b81d56827b1ae785c9acfd17
City Stickman Hero47318a439e6cab2f03533237554d54c20f7aebb7
City street racing0b04b58b75e3177955b018fafdf30ab85333a1f9
City timing racinga121b13069cdf1b49b23c5e6ae661b733d828a39
Cliff diving447ef6268110c38d2b877b24dd0aca64fb2a945d
College Bully Fighting Contested9f831374d3bef343b4ac3b0e133c87728b58a8
Composite driving raceb92a05e0f4272adde5a8027326f80a27bf33d082
Construction truck simulator47849d36529860621e0ee70b090394673e8ab318
Construction vehicle simulator32cddb97ea43abea7038c32943eaa9261b0960b7
Dead battlegroundsad7a2d73c7ab4617820ceb9275775985b0ea9338
Deadly zombie killer562d32c7164f0eb03708cbbd95e05773eb7c9dd7
Delicious restaurant5631cb845fe82159d956e1706369b97f3c926895
Dino Island survival761d1ddf7a1c154151fd1063e8bf0360fc55321b
Doomsday Sniperfaa4f1155864f9b608155a9f88d6f03dfd8a8210
Drifting speedlegendcb937b3451084f6d2234141e6ce99cddd3793b82
Drive danger zone9a812007f569919aafc9d3a2fd6a6ca1d74b6811
Drive school simulatora3a35029a7117ed4f27ed75918c65751743d40d6
Easy driving simulatorc4db10ee573129d137049fe91dec109dc8e2a5bc
Endless road racing10861b6024523a5565d6db7e368686389afeac1a
Escape Jurassic92fbf61b4a4b7f3abefd381a15843a34521eb6ed
Escape terror nunb6c4c01c309533735c4667854a28ad850471d2ae
Evil taste snake1b72cf9c2cc8bb9af967d450c23cc5f8bd2c4698
Evil towerdb72c401cd93981689a982a1ee1d028aa451f8f4
Extreme diving masterdaceb5776ba8bce6320854608e1a63ef6c2046ba
Fantasy adventureb1e59c622ee3379953e0127ab25a0a73cc508a06
fast knots mastera40beed049277026a0f0eb0d051c9defadca8f86
Firefighter simulator6de7ebf6a098b446dba0ac72e347dc4cc186d243
Forklift driving simulation Adsf01974eeeec43182b5a17f4753245389794b9e54
Free driving championship5136560049eb1740325494aa708937515cbc0668
Future survival challenge2ab5263be3b11a343744cc46552ee770ea977f9a
Gangster City Shootoutf0d91494d8c6dce16e5e3ab2f5771e865d773e51
Gangster crime legend78d114cf22fffc67c744ee80ff133008a0397099
Gangster evil city20470de1ef944de2a7918ca17002f33c9df177cd
Gourmet chefdd2f7b303c80aee38c71bcbf7dd62dd57ea5fcd1
Gunfight elitef2643a0b517b51c7c18a3e6c853b736e6b0adf28
High speed championshipc42b5e86ee2d1c01fb210566d296a016ce31ef57
Home defend battled5dc75912e039d95a5723f1d17fdd59fafb2e1ec
Hope of doomsday24105bc679bca09964593f768f334ca25a833a5e
Hostage rescue operation2edd4fc0d2b7bc3ac7e56e74a3baf58f36272b85
Hot Crash Racing394111215a381baef07ab43f7e343f9b4b451db2
Influencer dress up master582a02e0a5d98c2970a524f6ca97c13d8c4defc0
Island survival guided294206a3760ea7c823d2b669dc76cd23a0781a2
Lethal gun battle of pixel mand10a7da60bffee2786d570112fa5d6e0ca6c62da
Living dead battlefield587d0c9138a53b327afe69c090bf977757551bd3
Luxury car city racingb4c11c9c19e53285ab245da6529bb9adb1faedc4
Luxury car crash simulatorb69c0291251be552c6c9ff8161abc0c5d7323c75
Luxury car racing8d5f8c2f4ba3230fa927d497b9160294058658e5
Luxury car racing Hurricane553676688a6c0c4cde71ee2b2639ef4d14a29bd4
Luxury car ultimate speed0cf0b20ab0664443e77ca3202d058b270b8dc2aa
Mafia crime city77d9e5da03e66bf7d4fc96c55d5e1283f67e870d
Master pilot0fa877a17adf054ad5dfb4df07a66954057417f2
Metal dead missionf2742710a4d6aec0fddda234101159b4111fab3c
Metal Slug Armora0cb1232a1bcff9a16ea0a409f42b7ed6dab8aae
Midnight Speed Race00f5d3e40216842c107456f81008b355175418bd
millionaire simulatore7ad32238c612b3905ba4362f5e4c38b7cd8cbe6
Motorcycle city free driving391eed9c22041677d311f912212f6b49dd716980
Motorcycle lethal racing64be16a6c0f829515f2049e6e5ab31b6200f4440
Naval battle aged99d8e5c70f867492e9908ddac09f43f7393266c
Ninja Legion place battle245778ef52e511ce3d317247a80f1f42c3160d66
Ninja rescue masterddd820fe425d143298e6a2d5358c000ef129b841
Offroad driving simulatore6127854280c8ed57b02e31ae6b92691e721902e
Operation firewire0d5c4057b6a1e08d0b90158453a27fc3c4a5be43
Operation Snipe84aaa479668304a8c886e110bb945980362edc72
Parking simulatore8bd8be32ed3aebe83ab17f64bc96aa8cd62618c
Perfect kitchen6f9b0f0a0fae1e8da1b45c792565030832baac3d
Pilot test simulator1dc9041c623175e62b793499f877dcdbe6c7a02d
Pirate Island Survival2f43b0a927c6127d8d1c3a920876b853c2b703ad
Pirate island wild survival61776ecc091a7097162ea59f0d870d718052fb75
Pixel battleground legend5a9211ccec1a1a2cf78a9af6ed6d2ee891994cf7
Pixel city survival08126e7c6dbe785d9d7ab62f2682a62f8b629351
Pixel conflict battlefield3c98fc7efe6685bf258fb592b268f97ecb04db72
pixel desperate fightee21e5dc0bc9fd97a4f6b8f0f5600fb698005806
Pixel field survival gun battlefa259b2332c3df5b49bf39442e0a0823efda8103
Pixel killer city battlefield892d2575d5780703ff537f14d9dbd99a9c8fc343
Pixel mad battle royale0418c85691260d9f5bf97da4287a20a94197d724
Pixel man city shootinge4be4c31d4a086510a8228bdca0e912f9bd501ef
Pixel monster warb5f60efdfe0f3ababb21a60165b9cf875760816b
Pixel multiplayer battle royaled22dba8ed5cca602fcb3671fcd75bccf73893626
Pixel shoot battle grounde121ac6bc76790ba5188985e4e6796059c706385
Pixel shooting battlefieldfedbbf0414a4c71d66cccabe52afcca3180a7c0b
Pixel shooting worldbef0706efeebbd244aef756e7aefb2b3c3830eae
Pixel wilderness shootoutdcdcbed79aa270cdf65b857f940cc74c15157bf0
Pixel Zombie Doomsday Disaster8a294c8557cdb00ce277a36a5fe5242de907894e
Primal smash fight741fa91c2be3093e6edfc553a51038eceb0368ba
Primitive people fight in disorderfc39865027a95e8a72fdef44dd5fcd879336bef8
Prisoner escorted driving8d86ca23d20d8185009b35e1ec66f130b99cc03a
Racing maniab5f93f3162ebf4bfa2f60c38e1e0faceb9516c92
Racing Road Shooting36366fb656378c21fc24651383a16e5e8f5937ed
Real airplane pilot276fbd448ffa8071def70d6043c4a823093b0d0c
Real vehicle driving masterf70b2faa1f34ba0318bc4b08235f88ad7a0967cd
Real war front sim626d2d93f70b55c5440ff49d641bfdec9cacd04b
Revenge zombie invasion0675e69a6ea1a212a2a93ef8a1fc8b1201d7ab89
Rome defensea82f2fa8b97a864fa1cd701a4ff57b640ef5f6a0
Royal sniperd5e48f2d7127b8f90d268968367f2f51be1583a5
Run guys107c84e8727a42815d67b56ff7cdfb15d36ac06d
Save the princess7ec611a45b59c9797416d0902a6ca5282487fe50
School fighter4ee80638496df3873bd10d5cd601e6deb475f5c1
School Kung Fu show0924d1455f80434dffa110d05fea6735f09c6e20
Secret transfer missiond8f274f22d55fc0a4d7a515b99a5991ca1deb6ff
Shoot it downe65dcb0e3ebb5b95fffb8d45f7145ce185f610e1
Sky FireWire battlefield1ada19c422266ae7e29b1efb0e185c1d7d4762aa
Soldiers set war17c8331ff2fd450d2ab8c8c0dd2e6c2df306cb41
Soldiers united battlebd4b2cb225c45ef1095892e4b4a136d4524a751c
Space Escortbef6cff2df62b4a5db8fa94149a66b12eb625096
Special forces fire missione0a4240ee150654ac3976aaa135856a39bf26a8c
Spider Stickman City Battle37358755e8a65025662726eaedcd9138ac3dbd2a
Spider superman city hero4a038648bf6b5f8f5fc3383f16465d799c9d987b
Steel tank chaos battleb02424c6e3b561c12526dc2fcc222c7ca03aeb4e
Stickman battle zombies5d6e0071b7ec7dc1779a97c92ede41045afa89f0
Stickman city legend9342d3d66b2098663d1b0698b663218f781156f6
Stickman sniper elite5271c37c19c7a247c862c7112d7dea8db49ff046
Stimulating roller coaster6837238bdc8c1905c1cfbfec3ca39a8e586677cc
Stray in dead island3379888d53fd51effd67ff9fbc2119d68d97eaf3
Street car driving63148f90fb8e8079fadb3ce493674fe1cb190df2
Street challenge race6670503a1cf8b08e8929e711d3015899c89fd80a
Street shuttle race5a192f3a6503ab550032023aec571d7ee6712c07
Super power police run828e546a47bbb0d3736875f6a2ee00888e47df0b
Survival on uninhabited islandeb047267a7f24b5747d382b16127a8fa01fda801
Swat War Conflict84f82cdee151a378799b1f932d1c858b06a0ae3b
Tank endless battleb544cfa04bbc4c543dedba058612c15409a85c1f
Tank joint war372fb1d75294a7c410c5a1c56491bc87979f1839
Tanks global hegemonycc2b9dcd658316f87f35dd75d03c1e3f1ab2a870
The Adventures of the Tribal Princecc6535e4e9e7e15ab25a3eefda7ddd59101ceb3d
Top restaurantc84d75738aa2ddeaef76f4ca25dcb0679b1668c1
Transfer Prisoner Actionf3a2abc0b87efcdbb40baeed076272d921d8b7a9
Transform props racing cars6c432c9fcef93f885dde2ebe7229d4eff84a8514
Urban thugs legend470d7242731bb388965bbb5ff054a34784b50a16
Vegas gangster legend2c73e62f29675ac96f49eadc2ec10351568bd3da
Vehicle driving testb7ba41e8b9916f760413b7246238ac541baf5335
Warship commandb084b4415bd7e8662028c9f372b5a881b87283cf
Western sniper66a582ab71624e06ee65b59ee2dcd9892c95dbf5
Wild battleground700d4672266d6f5d0389c160f7c51a0e2145b096
Wild planet4dca550b503de2728db030f8cd92fbe889030f17
World Tank Championshiped02f8a71a39667da7315155d924a12b0fc083cb
Zombie crisis on earth7d5dae3505c05374a520af127c285ea159d9d2bb
Zombie death city64eff308776e31534b07d0e03a530516e30fafa7
Zombie Doomsday Invasion4900a43d29501a10d4d223ad5ed4e3188de1d630
Zombie doomsday Survivalad94b5f60864ae7fc45465ad1d3572a7d11c39d3
Zombie Doomsday war8153376ecbb60c8533c11faee9435d0568c2e93a
Zombie Shootout Battle Royale14eb8161f37667260fe4946ad3ef4bbb3bb9fd28
Команда должна убить боеголовку0ff27de04098aaf0420f37e1c96f2770e399656b
элитный отряд на поле боя98a6f3a393f2b0ab5a43662f6cdba1af89b431a1
快点躲起来bb86d27c4e6f2e7858eb59d41e0fd911afce085a