Joker malware attacked Huawei’s AppGallery

A cyber attack on Huawei’s AppGallery has brought severe consequences. Manipulated apps in the Chinese smartphone giant’s own app store infected over 500,000 of the company’s smartphones. Those affected must now fear for their data. After all, the malicious software is said to make it possible to view and steal SMS, contacts and information about the device. It is also said to be possible to launch expensive WAP services.

Not all Huawei smartphones affected

Fortunately, not every owner of a smartphone from the Chinese manufacturer now has to worry about their data. Rather, “only” devices that use EMUI 8, EMUI 9, EMUI 10 or EMUI 11 as software are affected. But which malicious software are we talking about at all? The malware used by the cyber criminals is called “Joker” and is already known to industry experts. After all, we have encountered it time and again since 2017. Now, as a popular and reliable antivirus software, “Dr. Web Anti-Virus” has found that some smartphones from Huawei suffered from corresponding attacks. The devastating thing about “Joker” is not only data theft, but also access to important functions. The malware can also act as spyware at the same time. It installs SMS and WAP services, which can ultimately incur high costs.

Affected apps already identified

If the information provided by the experts from “Bleeping Computer” is to be believed, more than 538,000 Huawei smartphones are affected by the attack. The cause is said to be apps in the in-house AppGallery. Of course, Huawei has immediately removed the endangering apps from its own app store. However, smartphones that have already been attacked will no longer be able to benefit from this. Thus, the following apps are said to have been used as “transmitters” of the malware:

• Fun Color
• Superkeyboard
• All-in-One Messenger
• New 2021 Keyboard
• Camera MX – Photo Video Camera
• BeautyPlus Camera
• Color RollingIcon
• Funney Meme Emoji
• Happy Color
• Happy Tapping

Risks for Google smartphones too?

As mentioned earlier, this attack is not a first. Android devices are also affected by corresponding attacks from time to time. Thus, the approach is unfortunately also regularly found in apps in the Google Play Store. The number of malware-infected apps increases with each attack. Between 2017 and 2020, more than 1,700 apps were affected. Google reacted as quickly as Huawei and immediately removed the infected apps from the app store. Unfortunately, anyone who fears that they are also affected by the attack only notices this when it is already too late. As a rule, it is only when you look at the bill for SMS and WAP services that you get the “aha” feeling. It is best to stay away from the above-mentioned and other dubious apps.