Beyond App Markets: Demystifying Underground Mobile App Distribution Via Telegram

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Guo, Yanhui, Wang, Dong, Wang, Liu, Fang, Yongsheng, Wang, Chao, Yang, Minghui, Liu, Tianming, Wang, Haoyu
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915005287366656
author Guo, Yanhui
Wang, Dong
Wang, Liu
Fang, Yongsheng
Wang, Chao
Yang, Minghui
Liu, Tianming
Wang, Haoyu
author_facet Guo, Yanhui
Wang, Dong
Wang, Liu
Fang, Yongsheng
Wang, Chao
Yang, Minghui
Liu, Tianming
Wang, Haoyu
contents Within the thriving mobile app ecosystem ecosystem, a subset of apps provides illicit services such as gambling and pornography to pursue economic gains, collectively referred to as "underground economy apps". While previous studies have examined these apps' characteristics and identification methods, investigations into their distribution via platforms beyond app markets (like Telegram) remain scarce, which has emerged as a crucial channel for underground activities and cybercrime due to the robust encryption and user anonymity. This study provides the first comprehensive exploration of the underground mobile app ecosystem on Telegram. Overcoming the complexities of the Telegram environment, we build a novel dataset and analyze the prevalence, promotional strategies, and characteristics of these apps. Our findings reveal the significant prevalence of these apps on Telegram, with the total sum of subscription user numbers across channels promoting these apps equivalent to 1% of Telegram's user base. We find these apps primarily cater to gambling and pornography services. We uncover sophisticated promotional strategies involving complex networks of apps, websites, users, and channels, and identify significant gaps in Telegram's content moderation capabilities. Our analysis also exposes the misuse of iOS features for app distribution and the prevalence of malicious behaviors in these apps. This research not only enhances our understanding of the underground app ecosystem but also provides valuable insights for developing effective regulatory measures and protecting users from potential risks associated with these covert operations. Our findings provide implications for platform regulators, app market operators, law enforcement agencies, and cybersecurity professionals in combating the proliferation of underground apps on encrypted messaging platforms.
format Preprint
id arxiv_https___arxiv_org_abs_2408_03482
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Beyond App Markets: Demystifying Underground Mobile App Distribution Via Telegram
Guo, Yanhui
Wang, Dong
Wang, Liu
Fang, Yongsheng
Wang, Chao
Yang, Minghui
Liu, Tianming
Wang, Haoyu
Cryptography and Security
Within the thriving mobile app ecosystem ecosystem, a subset of apps provides illicit services such as gambling and pornography to pursue economic gains, collectively referred to as "underground economy apps". While previous studies have examined these apps' characteristics and identification methods, investigations into their distribution via platforms beyond app markets (like Telegram) remain scarce, which has emerged as a crucial channel for underground activities and cybercrime due to the robust encryption and user anonymity. This study provides the first comprehensive exploration of the underground mobile app ecosystem on Telegram. Overcoming the complexities of the Telegram environment, we build a novel dataset and analyze the prevalence, promotional strategies, and characteristics of these apps. Our findings reveal the significant prevalence of these apps on Telegram, with the total sum of subscription user numbers across channels promoting these apps equivalent to 1% of Telegram's user base. We find these apps primarily cater to gambling and pornography services. We uncover sophisticated promotional strategies involving complex networks of apps, websites, users, and channels, and identify significant gaps in Telegram's content moderation capabilities. Our analysis also exposes the misuse of iOS features for app distribution and the prevalence of malicious behaviors in these apps. This research not only enhances our understanding of the underground app ecosystem but also provides valuable insights for developing effective regulatory measures and protecting users from potential risks associated with these covert operations. Our findings provide implications for platform regulators, app market operators, law enforcement agencies, and cybersecurity professionals in combating the proliferation of underground apps on encrypted messaging platforms.
title Beyond App Markets: Demystifying Underground Mobile App Distribution Via Telegram
topic Cryptography and Security
url https://arxiv.org/abs/2408.03482