{"id":1284,"date":"2016-09-08T10:55:56","date_gmt":"2016-09-08T10:55:56","guid":{"rendered":"https:\/\/antivirus.comodo.com\/blog\/?p=1284"},"modified":"2025-06-19T18:18:20","modified_gmt":"2025-06-19T12:48:20","slug":"dresscode-malware-infects-google-play-store-apps-detected","status":"publish","type":"post","link":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/","title":{"rendered":"\u2018DressCode\u2019 malware that infects Google Play Store apps detected"},"content":{"rendered":"

Here\u2019s some news for android users who know that it\u2019s not just antivirus for android<\/strong> that\u2019s needed for virus removal<\/a> or to encounter malware threats; it\u2019s a thorough understanding of malware and their functioning that matters\u2026<\/p>\n

\"malware<\/p>\n

 <\/p>\n

It was a few months ago that the research team at security firm Check Point Software Technologies Ltd. uncovered a new Android malware called Viking Horde, which infected Google Play apps. Viking Horde managed to bypass Google Play malware scans for a couple of months and remained undetected. Now, researchers at Check Point have detected another malware<\/a> that has infected over 40 apps in the Google Play Store. This malware has been named DressCode.<\/p>\n

A recent post made in the Check Point blog says- \u201cThe Check Point mobile threat prevention research team discovered a new Android malware on Google Play, called \u201cDressCode,\u201d which was embedded into more than 40 apps, and found in more than 400 additional apps on third party app stores. Check Point notified Google about the malicious apps, and some have already been removed from Google Play.\u201d<\/p>\n

As per Check Point researchers, the oldest of these apps were uploaded to Google Play in April and remained undetected till recently. In the meantime, these apps were downloaded. (southern.ncsy.org\/<\/a>) Some reached between 100,000 and 500,000 downloads each. Thus, it could be understood that between 500,000 and 2,000,000 users downloaded the malicious apps from Google Play.<\/p>\n

How DressCode malware works<\/strong><\/p>\n

DressCode created a botnet that uses proxied IP addresses. These IP proxied addresses are used to disguise ad clicks and generate false traffic, thereby generating revenue for the attacker. The botnets, as per Check Point researchers, \u201ccan be used for various reasons based on the distributed computing capabilities of all the devices\u201d.<\/p>\n

After being installed on a device, DressCode initiates communication with its command and control server. After the initial connection is established, the C&C server orders the malware to \u201csleep,\u201d to keep it dormant until there\u2019s a use for the infected device. Later, when the attacker wants to activate the malware, he would turn the device into a socks proxy and reroute traffic through it.<\/p>\n

Beware of DressCode<\/strong><\/p>\n

Users need to be always cautious of malware like DressCode since it could cause much harm and could lead to data breach too. The Check Point blog says- \u201cBoth Viking Horde and DressCode malware create botnets which can be used for various purposes, and even to infiltrate internal networks. Since the malware allows the attacker to route communications through the victim\u2019s device, the attacker can access any internal network to which the device belongs. This can compromise security for enterprises and organizations.\u201d<\/p>\n

Thus it becomes very much imperative for us to keep ourselves updated about malware and their workings than just being armed with antivirus for android<\/a>.<\/p>\n

\"Antivirus<\/a><\/p>\n

\n

Secure your website today<\/strong><\/p>\n

\"Free<\/a><\/p>\n

Related Resources:<\/strong>
\n<\/strong><\/p>\n

https:\/\/antivirus.comodo.com\/blog\/computer-safety\/five-best-virus-and-malware-removal-tools\/<\/a><\/strong><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Here\u2019s some news for android users who know that it\u2019s not just antivirus for android that\u2019s needed for virus removal or to encounter malware threats; it\u2019s a thorough understanding of malware and their functioning that matters\u2026   It was a few months ago that the research team at security firm Check Point Software Technologies Ltd. […]<\/p>\n","protected":false},"author":5,"featured_media":1516,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[18],"class_list":["post-1284","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-comodo-news","tag-antivirus-for-android"],"yoast_head":"\nGoogle play store app is infected by dresscode malware<\/title>\n<meta name=\"description\" content=\"A new malware from android family named dresscode is found infecting more than 400 apps from google play store and also from third-party app stores.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Google play store app is infected by dresscode malware\" \/>\n<meta property=\"og:description\" content=\"A new malware from android family named dresscode is found infecting more than 400 apps from google play store and also from third-party app stores.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/\" \/>\n<meta property=\"og:site_name\" content=\"Comodo Antivirus Blogs | Anti-Virus Software Updates\" \/>\n<meta property=\"article:published_time\" content=\"2016-09-08T10:55:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-19T12:48:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/09\/RF-10296_thb_19.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"225\" \/>\n\t<meta property=\"og:image:height\" content=\"170\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"seo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"seo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/\",\"url\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/\",\"name\":\"Google play store app is infected by dresscode malware\",\"isPartOf\":{\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/09\/RF-10296_thb_19.jpg\",\"datePublished\":\"2016-09-08T10:55:56+00:00\",\"dateModified\":\"2025-06-19T12:48:20+00:00\",\"author\":{\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/e534eccce9a7e6ced088443c73329462\"},\"description\":\"A new malware from android family named dresscode is found infecting more than 400 apps from google play store and also from third-party app stores.\",\"breadcrumb\":{\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/#primaryimage\",\"url\":\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/09\/RF-10296_thb_19.jpg\",\"contentUrl\":\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/09\/RF-10296_thb_19.jpg\",\"width\":225,\"height\":170},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/antivirus.comodo.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u2018DressCode\u2019 malware that infects Google Play Store apps detected\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/#website\",\"url\":\"https:\/\/antivirus.comodo.com\/blog\/\",\"name\":\"Comodo Antivirus Blogs | Anti-Virus Software Updates\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/antivirus.comodo.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/e534eccce9a7e6ced088443c73329462\",\"name\":\"seo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/3b7714e98dafc3a3b391832c0f5e2b406856b62c8e81ad94382c197cdb380790?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/3b7714e98dafc3a3b391832c0f5e2b406856b62c8e81ad94382c197cdb380790?s=96&d=mm&r=g\",\"caption\":\"seo\"},\"url\":\"https:\/\/antivirus.comodo.com\/blog\/author\/seo\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Google play store app is infected by dresscode malware","description":"A new malware from android family named dresscode is found infecting more than 400 apps from google play store and also from third-party app stores.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/","og_locale":"en_US","og_type":"article","og_title":"Google play store app is infected by dresscode malware","og_description":"A new malware from android family named dresscode is found infecting more than 400 apps from google play store and also from third-party app stores.","og_url":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/","og_site_name":"Comodo Antivirus Blogs | Anti-Virus Software Updates","article_published_time":"2016-09-08T10:55:56+00:00","article_modified_time":"2025-06-19T12:48:20+00:00","og_image":[{"width":225,"height":170,"url":"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/09\/RF-10296_thb_19.jpg","type":"image\/jpeg"}],"author":"seo","twitter_card":"summary_large_image","twitter_misc":{"Written by":"seo","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/","url":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/","name":"Google play store app is infected by dresscode malware","isPartOf":{"@id":"https:\/\/antivirus.comodo.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/#primaryimage"},"image":{"@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/#primaryimage"},"thumbnailUrl":"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/09\/RF-10296_thb_19.jpg","datePublished":"2016-09-08T10:55:56+00:00","dateModified":"2025-06-19T12:48:20+00:00","author":{"@id":"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/e534eccce9a7e6ced088443c73329462"},"description":"A new malware from android family named dresscode is found infecting more than 400 apps from google play store and also from third-party app stores.","breadcrumb":{"@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/#primaryimage","url":"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/09\/RF-10296_thb_19.jpg","contentUrl":"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2016\/09\/RF-10296_thb_19.jpg","width":225,"height":170},{"@type":"BreadcrumbList","@id":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/dresscode-malware-infects-google-play-store-apps-detected\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/antivirus.comodo.com\/blog\/"},{"@type":"ListItem","position":2,"name":"\u2018DressCode\u2019 malware that infects Google Play Store apps detected"}]},{"@type":"WebSite","@id":"https:\/\/antivirus.comodo.com\/blog\/#website","url":"https:\/\/antivirus.comodo.com\/blog\/","name":"Comodo Antivirus Blogs | Anti-Virus Software Updates","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/antivirus.comodo.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/e534eccce9a7e6ced088443c73329462","name":"seo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/antivirus.comodo.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/3b7714e98dafc3a3b391832c0f5e2b406856b62c8e81ad94382c197cdb380790?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3b7714e98dafc3a3b391832c0f5e2b406856b62c8e81ad94382c197cdb380790?s=96&d=mm&r=g","caption":"seo"},"url":"https:\/\/antivirus.comodo.com\/blog\/author\/seo\/"}]}},"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/posts\/1284","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/comments?post=1284"}],"version-history":[{"count":25,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/posts\/1284\/revisions"}],"predecessor-version":[{"id":21981,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/posts\/1284\/revisions\/21981"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/media\/1516"}],"wp:attachment":[{"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/media?parent=1284"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/categories?post=1284"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antivirus.comodo.com\/blog\/wp-json\/wp\/v2\/tags?post=1284"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}