Security experts from Bkav Internet Security have analyzed the threats

Feb 14, 2014 15:20 GMT  ·  By

Security researchers from Bkav Internet Security warn that 3 out of 10 top Google search results for Flappy Bird point to fake or malicious versions of the game.

Experts say users will be directed to websites in Vietnam, the homeland of the Flappy Bird creator, or sites in Russia.

In many cases, cybercriminals unpack the original game, inject malicious modules into it and start spreading it on the Web. Many of the altered versions are designed to automatically send SMS messages from the infected phones to premium rate numbers.

The worst part is that these malicious versions actually work, so while users are playing the game, their phones are sending out SMSs, helping the cybercriminals make a considerable profit.

Bkav says that the number of fake Flappy Bird versions has increased after the game’s creator, Nguyen Ha Dong, announced that he would be taking the game off the app markets.

“Bkav Honeypot System identifies the highest density of fake Flappy Bird in Vietnam, the game’s homeland, and in Russia, the country with strong presence of cyber criminals,” said Bkav’s Vice President of Antivirus Products and Technologies, Vu Ngoc Son.

“As a Vietnam-based leading Internet security corporation, Bkav is well aware of the situation and updates all signatures of fake Flappy Bird in Bkav Mobile Security, which you can find a free version on Google Play,” he added.

In addition to installing security software on their mobile devices, users are also recommended to download games and applications only from trusted app markets. Although malicious apps have been spotted on legitimate markets such as Google Play, it’s less likely that you’ll come across a fake app than it is on third-party websites.