Modernizing Authentication — What It Takes to Transform Secure Access
Kaspersky's Roel Schouwenberg recently came across two fake apps in the Amazon App Store, "Internet Accelerator Speed Up" and "Shake Battery Charger," which claim to offer performance improvements, but don't do anything except deliver Airpush mobile ads.
"It should come as no surprise that there are malicious apps in the Amazon App Store," Schouwenberg writes. "Amazon.com is incredibly popular and it's a very trivial step to also upload an app into their store. We detect these pieces of malware as HEUR:Hoax.AndroidOS.FakeBapp.a and have been in contact with Amazon.com about this. The apps were previously available in Google Play as well, but had been removed at an earlier time."
"After a bit of online research, Schouwenberg found a Twitter account [matching the developer's name], and discovered that references in the app code to 'Bapplz' match references in the social feed," Infosecurity reports. "That in turn [led] to the discovery of a website called bapplz.com that hasn’t been updated since August. 'Clearly, the project seems abandoned even if it's still making the author some money,' he noted."