MAM
New Stealthy ad clicking tactics found in popular apps on Google Play
MUMBAI: Two apps with over 1.5 million downloads use new method to stealthily click ads on users’ devices. Apps present on Play Store for almost a year before being discovered.
Norton LifeLock recently spotted a new tactic being used by apps on the Google Play Store to stealthily perform ad-clicking on users’ devices. A developer known as Idea Master has published two popular apps on the Play Store in the past year, with a collective download count of approximately 1.5 million. Norton LifeLock, a Symantec brand has informed Google of the observed behavior and the apps have now been removed from the Play Store.
The two apps, a notepad app (Idea Note: OCR Text Scanner, GTD, Color Notes) and a fitness app (Beauty Fitness: daily workout, best HIIT coach), are packed using legitimate packers originally developed to protect the intellectual property of Android applications. Android packers can change the entire structure and flow of an Android Package Kit (APK) file, which complicates things for security researchers who want to decipher the APK’s behavior. This also explains the developer’s ability to remain on the Play Store performing malicious acts under the radar for nearly a year before being detected.
The attack starts with a notification in the notification drawer on the user’s device.
Upon clicking on the notification, Toast is used to display a hidden view containing advertisements (Toast messages are commonly used to display unobtrusive notifications that appear on the current activity UI screen, such as when the volume is adjusted).
Unlike hidden views where the view is set to transparent in order to hide content from the user, this threat actor deploys a much more cunning way of running the advertisements while keeping them hidden from the user. This is done by first creating a Canvas outside the device’s viewable display such that, technically, the advertisements are drawn on the device. By using the translate() and dispatchDraw() methods (see Figure 4) the position of the drawings are beyond the device’s viewable screen area and the user is unable to see the advertisements on their device. Using this tactic allows advertisements, and any other potentially malicious content, to be displayed freely. The app can then initiate an automated ad-clicking process that produces ad revenue.
As threat actors generate ghost clicks and ad revenue, impacted devices will suffer from drained batteries, slowed performance, and a potential increase in mobile data usage due to frequent visits to advertisement websites.
These apps went unnoticed on the Google Play Store for nearly a year, affecting roughly 1.5 million users before we uncovered their sneaky behavior. The apps’ use of Android packers and the unusual method of hiding advertisements adds a level of complexity for security researchers.
A special thank you to Tommy Dong for his dedicated contribution in analyzing this sample.
Brands
Hyundai and TVS Motor partner to develop electric three wheelers
Joint development pact targets last mile mobility with localisation push
MUMBAI: Three wheels, one big ambition and a charge towards the future. Hyundai Motor Company and TVS Motor Company have signed a joint development agreement to co-create electric three-wheelers (E3Ws), aiming to crack India’s complex last-mile mobility puzzle. The collaboration moves beyond concept talk into execution mode, building on the E3W prototype first showcased at the Bharat Mobility Global Expo 2025. The goal now is clear, design, develop and commercialise a purpose-built vehicle tailored to Indian roads, riders and realities.
Under the agreement, Hyundai will lead design and co-development, bringing its global R&D muscle and human-centric engineering approach to the table. TVS Motor, meanwhile, will anchor the product on its electric platform, leveraging deep three-wheeler expertise and local market insight. It will also handle manufacturing and sales in India, with an eye on exports down the line.
The timing is strategic. India remains the world’s largest three-wheeler market, where affordability, durability and adaptability often outweigh sheer innovation. The upcoming E3W aims to strike that balance combining advanced technology with practical features such as adaptive ground clearance for monsoon-hit roads, improved thermal management for tropical climates, and flexible interiors suited for passengers, cargo or emergency use.
A key pillar of the partnership is localisation. Major components will be sourced and manufactured within India, a move expected to strengthen the domestic supply chain, create jobs, lower costs and improve after-sales support.
The shift from prototype to production will involve rigorous testing, certification and refinement to meet regulatory standards and consumer expectations. Dedicated cross-functional teams from both companies are already in place to accelerate timelines.
At a broader level, the tie-up reflects a growing trend in mobility, global players partnering with local specialists to navigate emerging markets. For Hyundai and TVS, the bet is that combining scale with street-level insight could unlock a new chapter in sustainable urban transport, one that runs not just on electricity, but on relevance.
