A fake ad blocker available outside of Google Play is bombarding Android users with ads, many of them vulgar, and to make matters worse, the cleverly hidden adware is hard to uninstall.
As documented by antimalware provider Malwarebytes, Ads Blocker, as the app is called, employs several tricks to surreptitiously and constantly bombard users with ads. The first is to simply ask for usage rights to display over other apps. Next, it makes a connection request to "set up a VPN connection that allows it to monitor network traffic." Finally, it seeks permission to add a widget to the homescreen.
In fact, approving the VPN connection—a standard requirement for some legitimate ad blockers—allows Ads Blocker to run in the background at all times. Combined with the permission to display over other apps, the app is free to plaster ads in a variety of aggressive and annoying ways. It displays full-page ads across the screen. It delivers ads in the default browser. It includes ads in notifications. And it places ads in the homescreen widget.
"This Android malware is absolutely relentless in its ad-serving capabilities and frequency," Malwarebytes researcher Nathan Collier wrote. "As a matter of fact, while writing this blog, it served up numerous ads on my test device at a frequency of about once every couple minutes."
The content of the ads is wide-ranging, including some, Collier wrote, that are "unsavory" or even "vulgar."
Equally annoying is the difficulty in removing the fake ad blocker from devices. Ads Blocker has no icon. There's no mention of Ads Blocker on the App info section of the Android settings, because the app shields the name with a white box. The concealment leaves many people struggling to uninstall the app. Another white box appears over the notification box. Pressing the box causes a dialog box to appear asking for permission to install yet more apps.
Collier went on to describe a simple way to remove the app—by looking for an entry with storage size of 6.57 megabytes in the App Info section of the Android settings. Users can then select that entry and useRead More – Source
