Authored by a Symantec employee

 

Researchers have recently discovered more than 800 apps on the Google Play store that contain an information-stealing ad library dubbed Xavier. Google has been notified and has already removed a number of the apps containing the malicious ad library from the Google Play Store.

What is an information-stealing ad library?

When it comes to free apps, there still may be a price, although it doesn’t always cost the user. There are other ways applications can earn revenue, such as running advertisements within the app itself. Ad libraries are a legitimate part of an application, however, they are software and can become compromised by cybercriminals in a myriad of different ways.

What does Xavier do?

This particular variant of the malicious ad library is what is known as a Trojan horse. This type of malware can collect sensitive user information such as email addresses, Device ID, device model, operating system version, country, device manufacturer, SIM card operator, screen resolution, and installed apps, all without the users knowledge.

How to stay protected from this type of threat

Taking advantage of quality security software such as Norton Mobile Security, which protects users from this particular threat, is an important measure you can take.

With Norton Mobile Security, you can also use our app advisor for Android to scan for "bad apps" like ones that contain Xavier before downloading them to your phone. Norton App Advisor is a special feature included with Norton Mobile Security. It notifies you if there are specific privacy risks, intrusive behavior of apps, excessive battery drainage and data plan usage.

This article is authored by an employee of Norton by Symantec. Symantec Corporation, the world’s leading cyber security company, helps organizations, governments and people secure their most important data wherever it lives. Likewise, a global community of more than 50 million people and families rely on Symantec’s Norton suite of products for protection at home and across all of their devices. Copyright © 2017 Symantec Corporation. Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Norton, and Norton by Symantec are trademarks or registered trademarks of Symantec Corporation or its affiliates in the United States and other countries. Other names may be trademarks of their respective owners.


Disclaimers and references:
Symantec Corporation, the world’s leading cyber security company, allows organizations, governments, and people to secure their most important data wherever it lives. More than 50 million people and families rely on Symantec’s Norton and LifeLock comprehensive digital safety platform to help protect their personal information, devices, home networks, and identities.

© 2017 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Norton, Norton by Symantec, LifeLock, and the Lockman Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the United States and other countries. Firefox is a trademark of Mozilla Foundation. Google Chrome is a trademark of Google, Inc. Mac, iPhone and iPad are trademarks of Apple Inc. Microsoft and the Windows logo are trademarks of Microsoft Corporation in the United States and/or other countries. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other names may be trademarks of their respective owners.