Cumbha.app Adware
During the evaluation of new file submissions on the VirusTotal website, our researchers came across Cumbha.app. Following a thorough analysis, it was identified as adware belonging to the Pirrit malware family. Cumbha.app is specifically crafted to inundate users with unwanted and potentially harmful advertisements.
Adware, short for advertising-supported software, functions by executing intrusive advertising campaigns. This involves presenting third-party graphical content, such as banners, pop-ups, overlays, etc., on visited websites and/or other interfaces.
It is noteworthy that certain conditions may need to be met for adware like Cumbha.app to operate as intended, such as a compatible browser/system or user geolocation, visits to specific sites, etc. However, regardless of the circumstances enabling Cumbha.app to deliver advertisements, it poses a threat to both device and user safety.
These ads primarily promote online scams, unreliable or harmful software, and even malware. Clicking on some of these ads may trigger scripts that initiate downloads or installations without the user's consent.
While legitimate products and services may be promoted through advertisements, it is unlikely that official parties endorse them in this manner. The more plausible scenario involves scammers exploiting content affiliate programs to gain illegitimate commissions.
While Pirrit adware-type applications often exhibit browser hijacker capabilities, our examination of Cumbha.app did not reveal these traits.
Advertising-supported software typically includes data-tracking functionalities, a characteristic that may be applicable to Cumbha.app. The targeted data can encompass browsing and search engine histories, Internet cookies, usernames/passwords, personally identifiable details and financial information.
How Can You Best Keep Your System Free of Adware?
To keep your system free of adware, follow these best practices:
Use Reputable Security Software:
Install reputable antivirus or anti-malware software and keep it up-to-date. Regularly scan your system to detect and remove any potential adware.
Keep Your Operating System Updated:
Regularly update your operating system and software with the latest security patches. Adware often exploits vulnerabilities in outdated software.
Be Cautious with Downloads:
Only download software from official and reputable sources. Be cautious with freeware and avoid downloading programs from unknown or suspicious websites.
Custom Installation:
During software installations, choose the custom or advanced option. This allows you to review and opt-out of any additional software or toolbars that may come bundled with the desired program.
Read User Reviews:
Before downloading any software, read user reviews and check for ratings. This can provide insights into the legitimacy and potential adware presence in the software.
Avoid Clicking on Suspicious Ads:
Exercise caution when clicking on online ads. Avoid clicking on pop-ups, banners, or ads that seem suspicious, especially those promising unrealistic offers or prizes.
Use Browser Extensions Wisely:
Be selective with browser extensions and add-ons. Only install extensions from trusted sources, and regularly review and remove unnecessary or suspicious ones.
