Skip to content

Malware

Antidot

The malware displays fake Google Play update pages in multiple languages, including German, French, Spanish, Russian, Portuguese, Romanian, and English, indicating potential targets in these regions.

Antidot is a Android malware family.

Background

The malware presents bogus Google Play update screens localized into German, French, Spanish, Russian, Portuguese, Romanian, and English, suggesting that users in those regions are the intended victims.

To harvest sensitive data such as login credentials, Antidot relies on overlay attacks combined with keylogging.


Source: Malpedia (Fraunhofer FKIE).