Jump to content
mbam_mtbr

Detection of Ad SDK Cootek -> Android/Adware.Cootek

Recommended Posts

Due to its overly aggressive nature, we have decided to detect an Ad SDK known as Cootek as Android/Adware.Cootek.  Cootek displays full screen ads.  Not only does it display these ads within the app that contains the code, it also does this when the app is not open.  Most notably, after a device is unlocked.  This action, along with many complaints in the various reviews of infected apps has lead us to this decision.

The Cootek SDK is in many apps found in Google Play — over 2k according to our Mobile Intelligence System.  One example is 7 Fit.

If you are okay with these full screen Ads, please feel free to ignore the detection of Android/Adware.Cootek in Malwarebytes for Android.  Although aggressive, these Ads do NOT cause any other harm to your device.

Share this post


Link to post
Share on other sites

Hello, i think that is fixt now.

Since the last update.

Update Status by me:

Malwarebytes Mobile 3.0

App-Version 3.0.1.4

Malware database 2017.10.07.01

Phishing Data Bank 2017.10.09.03

MAM

Share this post


Link to post
Share on other sites
11 hours ago, MAM said:

@MAM

Ewind is another Ad SDK.  That particular app contains both Adware.Ewind and Adware.Cootek.

Nathan

Share this post


Link to post
Share on other sites

I am a little bit confused now. Yasterday, in the eavening by me ( iam german) Malwarebytes Mobile 3.0 ( on a Android device installed) detect this App not. To day in the morning,  it is recognized.

MAM

Share this post


Link to post
Share on other sites
15 hours ago, MAM said:

I am a little bit confused now. Yasterday, in the eavening by me ( iam german) Malwarebytes Mobile 3.0 ( on a Android device installed) detect this App not. To day in the morning,  it is recognized.

MAM

Hi @MAM,

It can take some time for the signature database to replicate across all our servers, and then update to your device.

Nathan

Share this post


Link to post
Share on other sites

Well, it is also avaible by me, on a Samsung Galaxy S 3 mini, Android 4.2.2, GT-I8200N.

 

Malware, or not?

MAM

 

 

Share this post


Link to post
Share on other sites
On 10/9/2017 at 12:52 PM, mbam_mtbr said:

Due to its overly aggressive nature, we have decided to detect an Ad SDK known as Cootek as Android/Adware.Cootek.  Cootek displays full screen ads.  Not only does it display these ads within the app that contains the code, it also does this when the app is not open.  Most notably, after a device is unlocked.  This action, along with many complaints in the various reviews of infected apps has lead us to this decision.

The Cootek SDK is in many apps found in Google Play — over 2k according to our Mobile Intelligence System.  One example is 7 Fit.

If you are okay with these full screen Ads, please feel free to ignore the detection of Android/Adware.Cootek in Malwarebytes for Android.  Although aggressive, these Ads do NOT cause any other harm to your device.

UPDATE: For similar reasons, we have added detection for Adware.Solid.  Once again, apps with this Ad SDK have been found in Google Play.

Share this post


Link to post
Share on other sites

how come official vivo touchpal detected  as a adware.cootek?

Screenshot_20180503_075855.jpg

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.