Faketrade

FakeTrade is a malicious software, or malware, that was first identified in 2021. It infiltrates Android devices through fraudulent money-earning apps uploaded on Google Play, and has been primarily linked with the app “com.mramyr.myrapp.” The malware was named "FakeTrade" due to its association with scam apps that mimic e-commerce platforms. These apps promise users increased income through referrals and top-ups, but instead distribute the FakeTrade malware, which is designed to steal personal information such as cryptocurrency wallet data. The discovery of FakeTrade was part of a larger investigation into two related malware campaigns, both financially motivated and targeting Android users. One campaign involved a new strain of Android malware dubbed "CherryBlos," while the other centered around FakeTrade. Both campaigns were uncovered a month prior to the identification of the specific FakeTrade malware, and they have been linked due to their similar modus operandi and the concurrent timing of their activities. In total, researchers found approximately 31 fake Android apps distributing the FakeTrade malware. Most of these apps were designed for shopping or persuading users to complete various tasks to earn money or purchase app credits. The malware operators used these fake money-earning apps to mask their true purpose: to exploit and damage user devices, disrupt operations, and steal valuable personal data, including crypto wallet information.