Beyond the virus: a first look at coronavirus-themed Android malware.

Area of Science:

• Cybersecurity
• Mobile Malware Analysis
• Epidemic-Themed Threats

Background:

• The COVID-19 pandemic spurred the creation of numerous malicious mobile applications.
• Limited understanding existed regarding the scope and nature of coronavirus-themed mobile malware.

Purpose of the Study:

• To conduct the first systematic investigation of Android malware themed around COVID-19.
• To analyze trends, installation methods, behaviors, and origins of this malware.

Main Methods:

• Creation of a daily growing dataset of COVID-19 themed mobile apps.
• Analysis of 4,322 APK samples, including 611 potential malware samples.
• Examination of app identifiers, malicious behaviors, and developer profiles.

Main Results:

• COVID-19 themed malicious apps surged with the pandemic.
• Malware often disguised itself using legitimate app identifiers.
• Primary malicious goals included information theft, phishing, and extortion.
• 75% of malware creators were new developers active during the pandemic.

Conclusions:

• The study provides a comprehensive overview of COVID-19 themed Android malware.
• A publicly released dataset aids future research in this domain.
• Understanding these threats is crucial for mobile security during health crises.