Porn Clicker Trojan Performs Click Fraud on Unsecured Android Devices

Porn clicker trojan, masquerading as popular app called Dubsmash, has yet again returned to Google Play Store after being pulled from the offering almost a month ago.
Surfacing for the first time more than month ago, Dubsmash 2 has made its return appearance on Google Play last week. Since then it has been successfully re-uploaded several times – always containing the same malicious code.
Interestingly, ESET found that this app will attack mainly Android devices without a security solution installed.

“If no AV software is installed then Dubsmash 2’s true functionality is activated. The trojan then proceed to request porn links from its server. These links will be loaded every 60 seconds into WebView inside an invisible window,” says Lukáš Štefanko, Malware Researcher at ESET.