Various Google Play Camera Apps Are Malicious

Trend Micro has reported that several beauty camera apps (detected as AndroidOS_BadCamera.HRX) on Google Play are capable of accessing remote ad configuration servers that can be used for malicious purposes. Some of these apps have already been downloaded millions of times.

Some of these apps redirect users to phishing websites that ask the user for personal information, such as addresses and phone numbers. Other’s display pop up adverts, even when the app is not in use. Some of these ads are fraudulent content and pornography.

Many of these malicious apps take try to look as legitimate as possible, users should always investigate the legitimacy of an app. One good method of doing this is by checking reviews from other users. If the reviews mention any kind of suspicious behavior, then it might be a good idea to refrain from downloading the app.

Indicators of Compromise (IoCs)

Package	Label	Installs
com.beauty.camera.years.pro	Pro Camera Beauty	1,000,000+
com.cartoon.art.photo.ygy.camera	Cartoon Art Photo	1,000,000+
com.lyrebirdstudio.emoji_camera	Emoji Camera	1,000,000+
art.eff.filter.photo.editor	Artistic effect Filter	500,000+
art.filter.editor.imge	Art Editor	100,000+
com.beauty.camera.project.cloud	Beauty Camera	100,000+
com.selfie.camerapro.pro	Selfie Camera Pro	100,000+
com.camera.beauty.kwok.horizon	Horizon Beauty Camera	100,000+
com.camera.ygysuper.photograph	Super Camera	100,000+
com.effects.art.photo.for.self	Art Effects for Photo	100,000+
com.solidblack.awesome.cartoon.art.pics.photo.editor	Awesome Cartoon Art	100,000+
com.photoeditor.artfilterphoto	Art Filter Photo	50,000+
com.photocorner.artfilter.arteffect.prizma	Art Filter Photo Effcts	10,000+
com.picfix.cartoonphotoeffects	Cartoon Effect	10,000+
com.picsartitude.arteffect	Art Effect	10,000+
com.csmart.photoframelab	Photo Editor	5,000+
com.wallpapers.nuclear.hd.hd3d.best.live.nuclear	Wallpapers HD	5,000+
com.perfectmakeup.magicartfilter.photoeditor.selfiecamera	Magic Art Filter Photo Editor	5,000+
appworld.fillartphotoeditor.technology	Fill Art Photo Editor	1,000+
com.artflipphotoediting	ArtFlipPhotoEditing	1,000+
com.artphoto.artfilter.artpiczone	Art Filter	1,000+
com.photoeditor.cartoonphoto	Cartoon Art Photo	1,000+
com.photoeditor.prismaeffects	Prizma Photo Effect	1,000+
com.cmds.artphotofiltereffect	Cartoon Art Photo Filter	100+
com.latestnewappzone.photoartfiltereditor	Art Filter Photo Editor	100+
com.livewallpaperstudio.pixture	Pixture	100+
app.pixelworlds.arteffect	Art Effect	50+
timepassvideostatus.photoarteffect.cartoonpainteffect	Photo Art Effect	10+
com.techbuzz.cartoonfilter	Cartoon Photo Filter	5+