Overclock.net › Forums › Industry News › Video Game News › [Proofpoint] Backdoored Pokemon GO Android App Found
New Posts  All Forums:Forum Nav:

[Proofpoint] Backdoored Pokemon GO Android App Found

post #1 of 16
Thread Starter 
Quote:
Originally Posted by Proofpoint 

In this case, Proofpoint researchers discovered an infected Android version of the newly released mobile game Pokemon GO [1]. This specific APK was modified to include the malicious remote access tool (RAT) called DroidJack (also known as SandroRAT), which would virtually give an attacker full control over a victim’s phone.

Likely due to the fact that the game had not been officially released globally at the same time, many gamers wishing to access the game before it was released in their region resorted to downloading the APK from third parties. Additionally, many large media outlets provided instructions on how to download the game from a third party [4,5,6].

Individuals worried about whether or not they downloaded a malicious APK have a few options to help them determine if they are now infected. First, they may check the SHA256 hash of the downloaded APK. The legitimate application that has been often linked to by media outlets has a hash of 8bf2b0865bef06906cd854492dece202482c04ce9c5e881e02d2b6235661ab67, although it is possible that there are updated versions already released. The malicious APK that we analyzed has a SHA256 hash of 15db22fd7d961f4d4bd96052024d353b3ff4bd135835d2644d94d74c925af3c4.

Source: Proofpoint
 
BOINC Server
(8 items)
 
 
CPUMotherboardGraphicsGraphics
AMD Ryzen 5 1600 3.875 GHz ASUS Prime X370-Pro EVGA GTX 1080 FTW2 2114 MHz 356 GB/s EVGA GTX 1050 Ti FTW 1962 MHz 
RAMHard DriveCoolingCooling
G.SKILL 2x8GB 3200 MHz 14-13-13-32-1T 48 tRC Samsung 850 EVO 500 GB Noctua NH-D15 2 x Cougar CF-V12HP Top Intake 
CoolingCoolingCoolingOS
Noctua NF-F12 2000 RPM Rear Exhaust 2 x Phanteks F140SP Front Intake Thermal Grizzly Kryonaut TIM Windows 10 Enterprise 64-bit 
MonitorKeyboardPowerCase
ASUS MG279Q 1440p IPS 150 Hz OC Ducky Shine 5 MX Brown Seasonic Platinum 660XP Corsair Carbide Air 540 
MouseAudioAudioAudio
Logitech G203 Prodigy OPPO PM-3 HIFIMAN HE-560 Cayin N5 
  hide details  
Reply
 
BOINC Server
(8 items)
 
 
CPUMotherboardGraphicsGraphics
AMD Ryzen 5 1600 3.875 GHz ASUS Prime X370-Pro EVGA GTX 1080 FTW2 2114 MHz 356 GB/s EVGA GTX 1050 Ti FTW 1962 MHz 
RAMHard DriveCoolingCooling
G.SKILL 2x8GB 3200 MHz 14-13-13-32-1T 48 tRC Samsung 850 EVO 500 GB Noctua NH-D15 2 x Cougar CF-V12HP Top Intake 
CoolingCoolingCoolingOS
Noctua NF-F12 2000 RPM Rear Exhaust 2 x Phanteks F140SP Front Intake Thermal Grizzly Kryonaut TIM Windows 10 Enterprise 64-bit 
MonitorKeyboardPowerCase
ASUS MG279Q 1440p IPS 150 Hz OC Ducky Shine 5 MX Brown Seasonic Platinum 660XP Corsair Carbide Air 540 
MouseAudioAudioAudio
Logitech G203 Prodigy OPPO PM-3 HIFIMAN HE-560 Cayin N5 
  hide details  
Reply
post #2 of 16
Mine is safe according to the MD5.
Append
(17 items)
 
  
CPUMotherboardGraphicsRAM
AMD FX-8320 Gigabyte GA-990FXA-UD5 SAPPHIRE NITRO+ RX 580 8 GB Corsair Vengeance Pro CMY8GX3M2B2133C9 
Hard DriveHard DriveCoolingOS
Samsung SSD 840 EVO Western Digital WD30 EFRX-68EUZN0 NZXT Kraken X52 Windows Pro 10 Insider Build 
MonitorMonitorKeyboardPower
LG 24MP76 LG W2261VP Cheap Genius Corsair RM 1000 Watt 80 PLUS Gold 
CaseMouseMouse PadAudio
Cooler Master CM 690III Window MAD CATz RAT 8 Asus STRIX Kingston Hyper X Cloud II 
Audio
2.1 Speakers Vigoole 
  hide details  
Reply
Append
(17 items)
 
  
CPUMotherboardGraphicsRAM
AMD FX-8320 Gigabyte GA-990FXA-UD5 SAPPHIRE NITRO+ RX 580 8 GB Corsair Vengeance Pro CMY8GX3M2B2133C9 
Hard DriveHard DriveCoolingOS
Samsung SSD 840 EVO Western Digital WD30 EFRX-68EUZN0 NZXT Kraken X52 Windows Pro 10 Insider Build 
MonitorMonitorKeyboardPower
LG 24MP76 LG W2261VP Cheap Genius Corsair RM 1000 Watt 80 PLUS Gold 
CaseMouseMouse PadAudio
Cooler Master CM 690III Window MAD CATz RAT 8 Asus STRIX Kingston Hyper X Cloud II 
Audio
2.1 Speakers Vigoole 
  hide details  
Reply
post #3 of 16
Soooo I assume 3rd parties meaning they torrented it? Why is this news? People downloading an unofficial launch version got a virus from distribution from non official sources...
Magma
(9 items)
 
Old Girl
(14 items)
 
 
CPUMotherboardGraphicsRAM
ryzen 1700X Asrock Fatality 370x ITX Gigabyte 1080 G1 Corsair DDR4 3200MHz 
Hard DriveCoolingOSMonitor
SanDisk 500GB SSD Deepcool Captin AIO Windows 10 LG 27" 4K 
Case
BitFenix Portal 
  hide details  
Reply
Magma
(9 items)
 
Old Girl
(14 items)
 
 
CPUMotherboardGraphicsRAM
ryzen 1700X Asrock Fatality 370x ITX Gigabyte 1080 G1 Corsair DDR4 3200MHz 
Hard DriveCoolingOSMonitor
SanDisk 500GB SSD Deepcool Captin AIO Windows 10 LG 27" 4K 
Case
BitFenix Portal 
  hide details  
Reply
post #4 of 16
Quote:
Originally Posted by vmatt1203 View Post

Soooo I assume 3rd parties meaning they torrented it? Why is this news? People downloading an unofficial launch version got a virus from distribution from non official sources...

 

It's free to download from the Google Play store, just not worldwide yet. This is simply a case of criminals taking advantage of people who can't wait. Legitimate 3rd party app stores exist, but they don't have the same level of security as the Play store.

post #5 of 16
the .apk I downloaded was all good according to sha256.

Seriously let down by the game though, if I was going to play pokemon I think i'd rather play the gameboy versions biggrin.gif
Ol'Faithful
(11 items)
 
  
CPUMotherboardGraphicsRAM
Intel Xeon x5660 P6X58D-E XFX AMD Radeon R9 280X Corsair Vengeance 24 GB Triple Chanel 6x4GB 
Optical DriveCoolingOSMonitor
Lite-On DVD-RW Noctua DH-14 CPU Cooler Windows 7 Pro x64 Samsung 24" LED 1080p 5ms DVI (S23A300B) 
PowerMouseAudio
Thermaltake Toughpower 750W Gold Corsair M95 Onboard :S 
  hide details  
Reply
Ol'Faithful
(11 items)
 
  
CPUMotherboardGraphicsRAM
Intel Xeon x5660 P6X58D-E XFX AMD Radeon R9 280X Corsair Vengeance 24 GB Triple Chanel 6x4GB 
Optical DriveCoolingOSMonitor
Lite-On DVD-RW Noctua DH-14 CPU Cooler Windows 7 Pro x64 Samsung 24" LED 1080p 5ms DVI (S23A300B) 
PowerMouseAudio
Thermaltake Toughpower 750W Gold Corsair M95 Onboard :S 
  hide details  
Reply
post #6 of 16
I had problems downloading it from the google store (I was on beta), so I used a apk mirror to download mine. It's SHA256 matches the good one though. Just playing on my tablet right now, getting a smartphone thursday.
    
CPUMotherboardGraphicsRAM
I7 920 ASUS Rampage II Extreme Gigabyte GTX460 1GB x2 OCZ 6 gb (3x2GB) 1600DDR Triple Channel 
Optical DriveOSMonitorKeyboard
LG 20x DVD Burner Sata Windows 7 Ultimate x64 Acer GD235hz (1920x1080 120hz) Logitch G15 
PowerCaseMouse
Cooler Master Real Power Pro 1250w Cooler Master Cosmos Logitech G9 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
I7 920 ASUS Rampage II Extreme Gigabyte GTX460 1GB x2 OCZ 6 gb (3x2GB) 1600DDR Triple Channel 
Optical DriveOSMonitorKeyboard
LG 20x DVD Burner Sata Windows 7 Ultimate x64 Acer GD235hz (1920x1080 120hz) Logitch G15 
PowerCaseMouse
Cooler Master Real Power Pro 1250w Cooler Master Cosmos Logitech G9 
  hide details  
Reply
post #7 of 16
Been fun so far bumping into creepy old men in the night

biggrin.gif
post #8 of 16
People just have to get it first, just have a to be part of the trend, that they lose their mind over it.
"Yes, lets download the game through third party, what can go wrong?" rolleyes.gif
Main system
(16 items)
 
Editing PC
(8 items)
 
 
CPUGraphicsGraphicsRAM
E5-1680v2 AMD FirePro D700 AMD FirePro D700 64GB 1866mhz 
Hard DriveOSMonitorCase
1TB PCIE SSD OSX 10.10.x Dell U2713H Mac Pro 
  hide details  
Reply
Main system
(16 items)
 
Editing PC
(8 items)
 
 
CPUGraphicsGraphicsRAM
E5-1680v2 AMD FirePro D700 AMD FirePro D700 64GB 1866mhz 
Hard DriveOSMonitorCase
1TB PCIE SSD OSX 10.10.x Dell U2713H Mac Pro 
  hide details  
Reply
post #9 of 16
Well nothing can go wrong as long as you download it from a trustworthy source (the media were linking to the safe version).
S340 Elite
(13 items)
 
Clevo P650RP6-G
(6 items)
 
 
CPUMotherboardGraphicsRAM
Intel i7 8700k Asus Maximus X Hero Asus ROG 1080 Ti Strix Team Dark Pro 16GB DDR4 3600MHz 
Hard DriveHard DriveCoolingOS
Samsung 850 Evo 1TB Seagate Barracuda 4TB Noctua NH-D15S Windows 10 
MonitorKeyboardPowerCase
Sony KDL-40HX853 Coolermaster Quickfire Rapid TKL  Superflower LEADEX II 850W NZXT S340 Elite 
Mouse
Logitech G403 Wireless 
CPUGraphicsRAMHard Drive
Intel i7 6700HQ nVidia GTX1060 6GB Kingston HyperX Impact 2133MHZ 16GB INTEL 600p 128GB 
Hard DriveOS
Samsung 850 EVO 1TB Windows 10 Pro 64 
  hide details  
Reply
S340 Elite
(13 items)
 
Clevo P650RP6-G
(6 items)
 
 
CPUMotherboardGraphicsRAM
Intel i7 8700k Asus Maximus X Hero Asus ROG 1080 Ti Strix Team Dark Pro 16GB DDR4 3600MHz 
Hard DriveHard DriveCoolingOS
Samsung 850 Evo 1TB Seagate Barracuda 4TB Noctua NH-D15S Windows 10 
MonitorKeyboardPowerCase
Sony KDL-40HX853 Coolermaster Quickfire Rapid TKL  Superflower LEADEX II 850W NZXT S340 Elite 
Mouse
Logitech G403 Wireless 
CPUGraphicsRAMHard Drive
Intel i7 6700HQ nVidia GTX1060 6GB Kingston HyperX Impact 2133MHZ 16GB INTEL 600p 128GB 
Hard DriveOS
Samsung 850 EVO 1TB Windows 10 Pro 64 
  hide details  
Reply
post #10 of 16
Quote:
Originally Posted by Defoler View Post

People just have to get it first, just have a to be part of the trend, that they lose their mind over it.
"Yes, lets download the game through third party, what can go wrong?" rolleyes.gif

Lol you sound like my 13yr old cousin.
Ol'Faithful
(11 items)
 
  
CPUMotherboardGraphicsRAM
Intel Xeon x5660 P6X58D-E XFX AMD Radeon R9 280X Corsair Vengeance 24 GB Triple Chanel 6x4GB 
Optical DriveCoolingOSMonitor
Lite-On DVD-RW Noctua DH-14 CPU Cooler Windows 7 Pro x64 Samsung 24" LED 1080p 5ms DVI (S23A300B) 
PowerMouseAudio
Thermaltake Toughpower 750W Gold Corsair M95 Onboard :S 
  hide details  
Reply
Ol'Faithful
(11 items)
 
  
CPUMotherboardGraphicsRAM
Intel Xeon x5660 P6X58D-E XFX AMD Radeon R9 280X Corsair Vengeance 24 GB Triple Chanel 6x4GB 
Optical DriveCoolingOSMonitor
Lite-On DVD-RW Noctua DH-14 CPU Cooler Windows 7 Pro x64 Samsung 24" LED 1080p 5ms DVI (S23A300B) 
PowerMouseAudio
Thermaltake Toughpower 750W Gold Corsair M95 Onboard :S 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Video Game News
Overclock.net › Forums › Industry News › Video Game News › [Proofpoint] Backdoored Pokemon GO Android App Found