Surfacing for the first time more than month ago, Dubsmash 2 has made its return appearance on Google Play last week. Since then it has been successfully re-uploaded several times – always containing the same malicious code.
Interestingly, ESET found that this app will attack mainly Android devices without a security solution installed.
“If no AV software is installed then Dubsmash 2’s true functionality is activated. The trojan then proceed to request porn links from its server. These links will be loaded every 60 seconds into WebView inside an invisible window,” says Lukáš Štefanko, Malware Researcher at ESET.
The whole story about porn clicker trojan is now available on WeLiveSecurity.com.
Raphael Labaca Castro
Editor in Chief, WeLiveSecurity.com