Categories
cybersecurity

Come on Google Play, rip out these rip-off wallpapers!

As part of our regular monitoring of Google Play, this morning we noticed an eye-catching wallpaper app called Super Wallpaper in Google’s top free apps list.

Super Wallpaper

It wasn’t the lurid graphics that caught our attention though, so much as the numbers. One million downloads is a lot. It’s not unusual, but it’s still a lot. And while a three-star rated app isn’t unusual either, it is unusual in a “Top” free app with 1 million downloads. It would imply that it was once closer to a 5-star app, but then something changed.

It’s possible users simply didn’t care about the quality of the app, or maybe the wallpapers were amazing. But we suspected a sting in the tail, and the comments confirmed it. We’ll let Google Play commenter, Page Weatherly, explain:

This app said it would be free, but then it makes we pay 200$ a year for a few wallpapers. This app deserves 0 stars but sadly you can’t rate it that.

You read that right: The sting in its tail was a £179.99 annual subscription. For wallpaper. Now, I love wallpaper as much as anyone, but that’s about £10 per square inch. For that kind of money I could be decorating my whole house with actual rolls of hand-printed Gucci wallpaper.

Almost nobody in their right mind is going to pay that knowingly, and that’s exactly what the app developers are hoping.

While Google has succeeded in squeezing most of the viruses and malware out of Google Play, shady characters have simply turned to making money from tactics like this instead. It’s known in the cybersecurity industry as fleeceware.

Fleeceware apps

The fleeceware authors simply hope that enough people who install the app won’t be paying attention when it mentions the subscription price. And since people are habituated to clicking through dialogs and notifications without paying attention, it works.

No filtering system is perfect, so it isn’t reasonable to expect Google’s review process to catch every scammer and chancer, but finding things like this should at least be difficult. So we thought we’d see if we could find another one.

It didn’t take long. Meet Magic Wallpaper.

Magic wallpaper

It’s only listed as having 50,000+ downloads but, somehow, despite charging exactly the same fortune, £179.99, for a few brightly coloured pixels as Super Wallpaper, it’s rated far worse, at 1.7 stars.

There is no attempt to deliver a fair product for a fair price in these apps, it’s just bait and switch, and as such we think they have no place on Google Play. It’s time to tear down these rip-offs, Google.

What to do

If you’ve fallen for one of these scams, don’t worry, the subscriptions are easy to cancel:

  1. Open the Play Store app
  2. Click the hamburger icon, top left
  3. Click Subscriptions
  4. Click the subscription you don’t want
  5. Click Cancel subscription

IOCs

App name:
Super Wallpaper

Package:
com.yuqid.colorpaper.client

APK hash:
A8104C42365B3CAF40B14E518804276A

Signing certificate hash:
2C15F3D43FB08248CB5840D65A902D59AEF5B185

Downloads:
1m+


App name:
Magic Wallpaper

Package:
com.cloud.magicwallpaper

APK hash:
3BC82159E76A534EAD033EB3DBC04187

Signing certificate hash: CD3B98F19DEB30089A80F408F8245FC6249B1DB8

Downloads:
50,000+

One reply on “Come on Google Play, rip out these rip-off wallpapers!”

Leave a Reply to Troy Hlavinka Cancel reply

Your email address will not be published.