I don't know what the hell this is, but my idiotic brother downloaded it.

I uninstalled it, but if it's malware, I'll be pissed off.

He literally just came up to me, and said that he clicked a link on YouTube to download something. He even said, "It's an invisible app."

He says it's invisible, because you can't find it unless you check the apps setting.

I'm afraid it is... My friend had the same app

@Jifuna
Well, fuck... I guess I'm screwed.

Most of the Clickbait website downloads these shit. The apk might be named as a calculator, TODO app or some kinda shit you tried to download. I tried to decompile the apk to find if anything is fishy about it, but for my surprise I found all the activities for a todo app but shit doesn't have anything else. If anyone's able to find what this shit actually does, please let me know.

Happened with my friend, he was getting annoying ads and doesn't know how to solve. And he factory reset the phone.

Why give your phone to your brother? And why don't you have a separate user account for him?

Install Malwarebytes.

@sigfried This.

@electrineer
Because my mom told me to give it to him.

My galaxy note 5 doesn't have the multiple accounts option.

@sigfried
I did use it as soon as I uninstalled it, but I'm still kind of paranoid.

@Michelle It's been on AOSP since kitkat. Why do they keep it disabled.

Grab the apk and decompile it to check if it does is something that it shouldn't

Do you remember which YT video it was on? You could report the video. 😉

Download show java in play store, and look at the source

At least he came and told you, imagine that he didn't and you kept using your phone, that's a serious issue.

My advice, reflash the system

So you should disable 3party apk installs when you hand it over next time

This was on my phone. If you are using Samsung, run the built in antivirus and it will get rid of the app and files.

If you are on anything else, use the Malwarebytes app

Btw, this app Will start popping up ads every time you unlock your phone.

@ewpratten built in antivirus?? Mcafee?? Nooooo

@Michelle looks legit

https://invisible-app.en.9apps.com/

@CozyPlanes I don't like it, but it worked.

@nik123 that's your server? If yes you use simple http to share the file or anything special?

@nik123 lol ssl, two step authentication, ssh key and maybe finger print scan, gotta be safe when sharing maleware 🤷🏼‍♂️

I'm pretty sure this is fake and has nothing to do with what my brother did, but I showed it to him anyway to scare him. It actually worked and he peomised not download anything weird anymore. :D

Looks like the scammer helped me out.

Oh fun. Another one.

@Michelle Too bad you are not more attentive. Reply to them to tell where to put their special tracking pixel. I liked the part about proof, though.

@electrineer
They have no proof because it never happened.

I've never, in my entire life, visited a porn website, nor have I touched the "no-no zone."

Also, I think they're making up the part about some tracking pixel. Anyway, I'll reply, but not with this email or else it'll confirm that it's an active email address. And they'll track my location.

I'll use a fake email address and reply to them in a virtual machine, using a VPN.

@Michelle It's clear that they didn't even try what they described. What they write is a fantasy of what they would do if they could. And still, some people will pay because they ask for a relatively small amount of money.

@electrineer
I don't consider $370 and $470 to be a small amount of money, and I think anyone who pays them is an idiot.

As annoying as they are, I have to admit, using their email to scare my brother was very entertaining. :D

I like how the one from the second email didn't even bother removing the escape sequences :P

Looks like a simple Metasploit payload.