- Android Trojan Uses TensorFlow AI to Simulate Human Clicks on Ads for Fraudulent Purposes
- Fake apps from GetApps and other platforms distribute malware through hidden browsers
- At least six apps were found with a total of more than 155,000 downloads.
Clearly, cybercriminals have found a way to use artificial intelligence (AI) to commit ad fraud, bypassing traditional behavioral defenses and successfully defraud ad networks and advertisers of their money.
Ad networks and advertisers make money, among other things, when people click on ads. Since the beginning of online advertising, criminals have sought ways to automate clicks so that large numbers of ads can be viewed and paid for.
Since click fraud can only be programmed and automated, ad networks have turned to behavioral analytics as a defense. If the clicks are too fast, not random enough, or similar, they are rejected as spurious. On some websites, ads will dynamically appear in different places, preventing automatic clicks.
The fake power of software scams
Now, the newly discovered TensorFlow Android Trojan uses machine learning models to better mimic human behavior when detecting and clicking on ads.
Instead of pre-defined JavaScript routines, the new processes are based entirely on visual analytics powered by machine learning. Using TensorFlow.js, an open source library for training and deploying machine learning models in JavaScript, Crooks can run AI models in the browser or on the server using Node.js.
In order to install malware on victims’ Android devices, criminals created many fake apps and managed to host them on GetApps, Xiaomi’s official app repository. The researchers also found these apps on numerous independent websites, social media platforms, and instant messaging channels such as Telegram.
The programs work in so-called “ghost” mode, which uses a hidden embedded browser that loads ads. The browser is placed on a virtual screen; Screenshots are shared with TensorFlow for analysis and ad placement.
As a result, clicking on UI elements feels more natural, fooling traditional behavior-based protections.
The malware was also said to be able to broadcast virtual browser screens directly to attackers, giving them seamless access to click, scroll and type commands.
So far, at least six apps have been found with more than 155,000 downloads.
through Computer beep
The best antivirus for any budget
Follow TechRadar on Google News I Add us as your preferred source Get news, reviews and opinions from our experts in your feed. Don’t forget to click the follow button!
And, of course, you can Siga TechRadar on TikTok Get our regular updates in the form of news, reviews, unboxing and videos. WhatsApp very
