{"id":6345,"date":"2019-07-03T11:42:52","date_gmt":"2019-07-03T11:42:52","guid":{"rendered":"https:\/\/www.upstreamsystems.com\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/"},"modified":"2023-05-08T11:11:47","modified_gmt":"2023-05-08T11:11:47","slug":"secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious","status":"publish","type":"press_release","link":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/","title":{"rendered":"Secure-D uncovers another popular Android app with 100 million downloads as suspicious"},"content":{"rendered":"<p><em>More than 114 million suspicious mobile transactions initiated by 4shared recently blocked by Upstream\u2019s Security Platform in 17 countries<\/em><\/p>\n<p><em>4shared delivers invisible ads to mobile devices, incurs unwanted charges<\/em><\/p>\n<p><strong>London, July 3<span style=\"font-size: 13.3333px;\">rd<\/span>, 2019\u00a0\u00a0<\/strong>\u2013 Upstream, a leading mobile technology company, reports that high-ranking Android application 4shared with over 100 million downloads was found to trigger suspicious background activity. The app delivers invisible ads to the device, generates fake clicks and carries out purchases of premium digital services, while reporting real views, clicks and purchases to the ad networks.<\/p>\n<p>Over a recent period, Upstream\u2019s security platform, Secure-D, detected and blocked more than 114 million suspicious mobile transactions initiated by 4shared. These transactions originated from 2 million unique mobile devices across 17 countries. If not blocked, they would have subscribed users to premium digital services potentially costing them up to $150m in unwanted charges. Most of the suspicious activity, which is still ongoing, was mostly centered in Brazil while other top affected markets include Indonesia and Malaysia.<\/p>\n<blockquote><p><strong>Guy Krief, CEO of Upstream, commented: <\/strong> <em>\u201cThe growing sophistication of disguised malware in the form of seemingly benign and quite often very popular applications together with the scale of the issue can no longer be ignored. No entity in the mobile ecosystem remains unaffected. From app developers, ad networks and publishers, to advertisers malware is putting a dent in both their credibility and earnings. Mobile operators, more often than not, are taking the blame while consumers not only remain widely unprotected and unwarned but are called to foot the bill. Mobile ad fraud, a $40 billion industry, will reign unchallenged unless increased mobile security rises up in the industry\u2019s priority list\u201d.<\/em><\/p><\/blockquote>\n<p>4shared is a popular and highly-ranked Android application that allows users to store and share video and audio files. The app generated over 100 million downloads from Google Play and ranked second in its category in Austria, 7th in Italy, and 10th in Switzerland. On 17th of April 2019, it was abruptly removed from Google Play, then replaced the following day.\u00a0 The new version has been submitted as an entirely new app \u2013 not a version update \u2013keeping the original 4shared icon. As of June 21st, there have been more than 5 million installs of the \u2018new\u2019 4shared on Google Play, free from the code responsible for the suspicious activity, unlike the more than 100 million previous app users that remained affected. 4shared is developed by Ukrainian firm New IT Solutions Ltd.<\/p>\n<p>The Secure-D investigation found that 4shared contains Software Development Kits (SDKs) with embedded and obfuscated hard-coded links to Command &amp; Control servers that access online ads via a series of redirections. They then download and load a JavaScript file that triggers automated clicks and sets cookies in order to determine whether a \u201cclick\u201d has already been made for a specific ad in the past. The application also sends personal data to a number of servers located in the British Virgin Islands and the United States upon user consent.<\/p>\n<p>Continuing to monitor the activity of 4shared in June, Secure-D has uncovered that the app is attempting to mask its identity whilst conducting suspicious activity. Instead of appearing under its own name, it assumes the names of either existing legitimate apps (like com.chrome.beta \u2013 the new beta version of Google\u2019s Chrome browser) or non-existing ones. The app seems to be using multiple fake names at the same time which it regularly and simultaneously changes (see graph below).<\/p>\n<p style=\"text-align: center;\"><em>Daily activity of fake app names used by 4shared (Source: Secure-D)<\/em><\/p>\n<p><a href=\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/graph.png\"><img loading=\"lazy\" class=\"wp-image-4071 size-full aligncenter\" src=\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/graph.png\" alt=\"\" width=\"1055\" height=\"395\" \/><\/a><\/p>\n<p>4shared is only one single case; Secure-D detects more than 170 new malicious apps every day. With the mission to combat mobile fraud, protect subscribers and safeguard mobile operators, Secure-D is building the trust of mobile users \u2013 much needed in emerging markets- and supports them in becoming fully engaged participants in the data era.<\/p>\n<p><strong><em>For the full report on the investigation &amp; further resources please\u00a0click <a href=\"https:\/\/www.upstreamsystems.com\/secure-d-uncovers-4shared-android-app-triggers-suspicious-background-activity-generating-fake-clicks-subscriptions\/\" target=\"_blank\" rel=\"noopener noreferrer\">here<\/a><\/em><\/strong><\/p>\n<p><strong> <em>Upstream has worked with TechCrunch to bring this story to light. You can read their write-up\u00a0<a href=\"https:\/\/www.upstreamsystems.com\/insights\/news\/\" target=\"_blank\" rel=\"noopener noreferrer\">here<\/a><\/em><\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>###<\/p>\n<p><strong>For more information please contact:<\/strong><br \/>\nUpstream Corporate Communications<br \/>\n\u0395: corp.comms@upstreamsystems.com<br \/>\nP: +30210 6618532 +30210 6618507<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Upstream, a leading mobile technology company, reports that high-ranking Android application 4shared with over 100 million downloads was found to&#8230;<\/p>\n","protected":false},"author":12,"featured_media":5713,"parent":0,"template":"","tags":[563,564,565,382,396,566,400,567],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v18.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Secure-D uncovers another popular Android app with 100 million downloads as suspicious - Upstream<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Secure-D uncovers another popular Android app with 100 million downloads as suspicious - Upstream\" \/>\n<meta property=\"og:description\" content=\"Upstream, a leading mobile technology company, reports that high-ranking Android application 4shared with over 100 million downloads was found to...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/\" \/>\n<meta property=\"og:site_name\" content=\"Upstream\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-08T11:11:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/graph.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1055\" \/>\n\t<meta property=\"og:image:height\" content=\"395\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.upstreamsystems.com\/#organization\",\"name\":\"Upstream\",\"url\":\"https:\/\/www.upstreamsystems.com\/\",\"sameAs\":[],\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\/\/www.upstreamsystems.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/brand.svg\",\"contentUrl\":\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/brand.svg\",\"width\":135,\"height\":38,\"caption\":\"Upstream\"},\"image\":{\"@id\":\"https:\/\/www.upstreamsystems.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.upstreamsystems.com\/#website\",\"url\":\"https:\/\/www.upstreamsystems.com\/\",\"name\":\"Upstream\",\"description\":\"The leading martech company\",\"publisher\":{\"@id\":\"https:\/\/www.upstreamsystems.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.upstreamsystems.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/#primaryimage\",\"url\":\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/graph.png\",\"contentUrl\":\"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/graph.png\",\"width\":1055,\"height\":395},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/#webpage\",\"url\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/\",\"name\":\"Secure-D uncovers another popular Android app with 100 million downloads as suspicious - Upstream\",\"isPartOf\":{\"@id\":\"https:\/\/www.upstreamsystems.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/#primaryimage\"},\"datePublished\":\"2019-07-03T11:42:52+00:00\",\"dateModified\":\"2023-05-08T11:11:47+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.upstreamsystems.com\/pt-br\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Press Release\",\"item\":\"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Secure-D uncovers another popular Android app with 100 million downloads as suspicious\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Secure-D uncovers another popular Android app with 100 million downloads as suspicious - Upstream","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/","og_locale":"pt_PT","og_type":"article","og_title":"Secure-D uncovers another popular Android app with 100 million downloads as suspicious - Upstream","og_description":"Upstream, a leading mobile technology company, reports that high-ranking Android application 4shared with over 100 million downloads was found to...","og_url":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/","og_site_name":"Upstream","article_modified_time":"2023-05-08T11:11:47+00:00","og_image":[{"width":1055,"height":395,"url":"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/graph.png","type":"image\/png"}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/www.upstreamsystems.com\/#organization","name":"Upstream","url":"https:\/\/www.upstreamsystems.com\/","sameAs":[],"logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.upstreamsystems.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/brand.svg","contentUrl":"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/brand.svg","width":135,"height":38,"caption":"Upstream"},"image":{"@id":"https:\/\/www.upstreamsystems.com\/#\/schema\/logo\/image\/"}},{"@type":"WebSite","@id":"https:\/\/www.upstreamsystems.com\/#website","url":"https:\/\/www.upstreamsystems.com\/","name":"Upstream","description":"The leading martech company","publisher":{"@id":"https:\/\/www.upstreamsystems.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.upstreamsystems.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"pt-BR"},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/#primaryimage","url":"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/graph.png","contentUrl":"https:\/\/www.upstreamsystems.com\/wp-content\/uploads\/2021\/07\/graph.png","width":1055,"height":395},{"@type":"WebPage","@id":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/#webpage","url":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/","name":"Secure-D uncovers another popular Android app with 100 million downloads as suspicious - Upstream","isPartOf":{"@id":"https:\/\/www.upstreamsystems.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/#primaryimage"},"datePublished":"2019-07-03T11:42:52+00:00","dateModified":"2023-05-08T11:11:47+00:00","breadcrumb":{"@id":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/secure-d-uncovers-another-popular-android-app-with-100-million-downloads-as-suspicious\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.upstreamsystems.com\/pt-br\/"},{"@type":"ListItem","position":2,"name":"Press Release","item":"https:\/\/www.upstreamsystems.com\/pt-br\/press\/press-releases\/"},{"@type":"ListItem","position":3,"name":"Secure-D uncovers another popular Android app with 100 million downloads as suspicious"}]}]}},"_links":{"self":[{"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/press_release\/6345"}],"collection":[{"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/press_release"}],"about":[{"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/types\/press_release"}],"author":[{"embeddable":true,"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/users\/12"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/media\/5713"}],"wp:attachment":[{"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/media?parent=6345"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.upstreamsystems.com\/pt-br\/wp-json\/wp\/v2\/tags?post=6345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}