Shopper
Aliases: LeifAccess
- First seen
- 2019-11-01 00:00:00
- Malware type
- spyware, trojan
- Family
- Malware family
- Last IoC activity
- 2026-05-28 15:55:08
- Profile updated
- 2026-07-07 14:09:47
Targeted industries: retail-and-hospitality technology-and-telecommunications
Targeted regions: country_code:ru country_code:br country_code:in
Context
Shopper/LeifAccess is a malicious Android app that uses Android's AccessibilityService to secretly control the device. It installs apps, leaves fake reviews, opens ads, and even registers users on various platforms. Disguised as a system app, it collects personal and device information and sends it to remote servers. The malware was most active in late 2019, especially in Russia, Brazil, and India.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Apk.Shopper (report)
- Kaspersky — 95544 (report)