Thursday , June 5 2025

Pay $20K To Infect Android Devices Via Google Play Store – Darkweb Report

In recent times, it has been observed by the security researchers at Kaspersky’s SecureList that the official Google Play store’s security has become increasingly vulnerable to the schemes of the threat actors.

These shady actors have exploited various loopholes to develop tools that can effectively Trojanize the existing Android applications, making them susceptible to exploitation.

Methodology

While here, the most shocking and alarming thing is that the threat actors are selling all these malicious wares for excessive sums of up to $20,000 on the dark web.

CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed

IBM has issued a security advisory for vulnerabilities in its QRadar Suite Software and Cloud Pak for Security platforms. These...
Read More
CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed

ALERT
Thousands of IP addresses compromised nationwide: CIRT warn

As Bangladesh prepares for the extended Eid-ul-Adha holidays, the BGD e-GOV Computer Incident Response Team (CIRT) has issued an urgent...
Read More
ALERT  Thousands of IP addresses compromised nationwide: CIRT warn

New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries

In March 2025, the Threatfabric mobile Threat Intelligence team identified Crocodilus, a new Android banking Trojan designed for device takeover....
Read More
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries

Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks

Qualcomm has issued security patches for three zero-day vulnerabilities in the Adreno GPU driver, affecting many chipsets that are being...
Read More
Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks

Critical RCE Flaw Patched in Roundcube Webmail

Roundcube Webmail has fixed a critical security flaw that could enable remote code execution after authentication. Disclosed by security researcher...
Read More
Critical RCE Flaw Patched in Roundcube Webmail

Hacker claim Leak of Deloitte Source Code & GitHub Credentials

A hacker known as "303" claim to breach the company's systems and leaked sensitive internal data on a dark web...
Read More
Hacker claim Leak of Deloitte Source Code & GitHub Credentials

CISA Issued Guidance for SIEM and SOAR Implementation

CISA and ACSC issued new guidance this week on how to procure, implement, and maintain SIEM and SOAR platforms. SIEM...
Read More
CISA Issued Guidance for SIEM and SOAR Implementation

Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora

The Qualys Threat Research Unit (TRU) found two local information-disclosure vulnerabilities in Apport and systemd-coredump. Both issues are race-condition vulnerabilities....
Read More
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora

Australia enacts mandatory ransomware payment reporting

New ransomware payment reporting rules take effect in Australia yesterday (May 30) for all organisations with an annual turnover of...
Read More
Australia enacts mandatory ransomware payment reporting

Why Govt Demands Foreign CCTV Firms to Submit Source Code?

Global makers of surveillance gear have clashed with Indian regulators in recent weeks over contentious new security rules that require...
Read More
Why Govt Demands Foreign CCTV Firms to Submit Source Code?

A recent study conducted between 2019 and 2023 revealed a concerning trend in cybersecurity.

The research has uncovered a prosperous marketplace where buyers and sellers engage in the trading of:-

  • App developer accounts
  • Botnets
  • Malicious Android applications

Certain wares, especially those extremely useful, are sometimes going for several thousands of dollars. As far as hiding malware and unwanted programs are concerned, the following categories are the most popular:

Malicious Services Offered

Various products, services, and deals are available on the dark web for customers with different needs and budgets, just like they are on legitimate online marketplaces.

Apart from this, threat actors have been observed buying a range of illicit products on the dark web, with developers’ Google Play accounts and source code for app development tools being among the most popular.

These accounts are often obtained through shady means, such as hacking or the use of stolen identities, enabling the threat actors to upload their malicious innovations to Google Play.

To be listed in Apple’s or Google’s app stores, software must undergo intensive testing before being uploaded.

Below we have mentioned all the major services offered in these marketplaces:-

  • Google Play loaders
  • Binding service
  • Malware obfuscation
  • Installations
  • Other illicit services

Average Prices

During the research analysis, the security analysts discovered a wide range of price tags offered on the dark web for Google Play-related services.

For hassle-free trading and proceedings, they also accept payments through various methods. There are also some sellers who hold auctions as a means of selling their goods.

There are several options for providing services, including sharing the final profit, renting services, and selling them for a one-time fee.

Here below, we have mentioned all the average price tags:-

  • A loader can cost between $2,000 and $20,000.
  • A binding service usually costs about $50 to $100 or $65 per file.
  • Obfuscation of 50 files may cost around $440.
  • The average price tag for installation ranges between $0.25 to $1.

Recommendations

The following steps should be taken to stay protected against mobile threats:-

  • Installing apps from unknown sources should not be enabled.
  • Don’t grant an app permissions that it doesn’t need to perform its main functions without checking its permissions.
  • Protect your device from malicious apps and adware with a reliable security solution.
  • When an update becomes available for your operating system and important apps, immediately update them.
  • Always use strong and unique passwords.
  • Ensure to enable the 2FA wherever possible.

Check Also

mobile

Bank server compromised using customer’s mobile, steal ₹11 crore

Cyber fraudsters hacked the Himachal Pradesh State Cooperative Bank’s server using a customer’s mobile phone. …

Leave a Reply

Your email address will not be published. Required fields are marked *