Loading malware…
FakeApp is an Android malware family observed on Google Play and in region-specific mobile campaigns. High-confidence reporting in the provided content links the name to fake job-search applications, including Fakeapp.hy, that specifically targeted users in Uzbekistan and collected victims’ personal data. The content also notes the reappearance of FakeApp malware on Google Play in broader mobile threat reporting. Separately, the name appears in reporting on malicious Android applications impersonating legitimate cryptocurrency wallet software, including fake Jaxx Liberty wallet apps removed from Google Play after more than 1,100 installs; however, the provided content does not conclusively establish that those wallet-stealing apps are the same malware family as FakeApp. Based on the supplied material, the strongest supported characterization is that FakeApp refers to Android malware distributed as fraudulent applications, including fake job-search apps, with data-theft functionality and observed presence on Google Play.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
The report also noted ... the reappearance of the Joker and FakeApp malware on Google Play.
Android fake job-search app trojan family targeting Uzbekistan; collects victims’ personal data.
Fake Jaxx Liberty wallet applications distributed via Google Play and related websites. Unlike the trojanized wallet copies, these apps lacked legitimate wallet functionality and simply prompted victims for recovery seed phrases, then sent them to attacker servers or a Telegram chat.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.