Target: Minecraft Pocket Edition (v1.21)
Source: YouTube Video Description (“Mediafire Link”)
Threat Type: Adware.HiddenAds / Trojan.Dropper
Minecraft costs money. Kids don’t have credit cards. They search YouTube for “Minecraft PE Free Download”. The top result offers a direct APK link.
Unlike the Spotify mod, this APK actually installs Minecraft. However, it also installs a hidden service.
We analyzed the AndroidManifest.xml and found a suspicious receiver:
<receiver android:name="com.ad.system.BootReceiver">
<intent-filter>
<action android:name="android.intent.action.BOOT_COMPLETED" />
</intent-filter>
</receiver>
This ensures the malware starts every time you reboot your phone, even if you never open Minecraft again.
Once installed, the malware waits 24 hours (to avoid suspicion). Then:
It starts displaying full-screen ads over other apps (WhatsApp, Instagram).
It hides its own icon from the app drawer, making it hard to uninstall.
If you see ads popping up on your home screen:
Go to Settings > Apps.
Look for an app with no name and no icon (blank space).
Uninstall it.
Better Solution: Don’t risk your phone for a $7 game.