What term describes attackers who publish malicious apps in major app stores to steal user credentials?

What term describes attackers who publish malicious apps in major app stores to steal user credentials?

• A. Wardriving
• B. Repackaging Legitimate Apps
• C. SMiShing
• D. Publishing Malicious Apps

Answer: (D)

Publishing Malicious Apps is the best fit because it directly describes the attacker’s action: releasing harmful software into major app stores with the aim of stealing user credentials. When apps are published under the umbrella of a trusted store, users are more likely to trust them and install, enabling the attacker to harvest credentials, often by disguising as legitimate apps or requesting sensitive permissions. Other terms refer to different behaviors: wardriving is about locating wireless networks, which isn’t related to app stores; SMiShing is phishing via mobile text messages, not about apps being published in stores; repackaging legitimate apps describes tampering with a real app to inject malware, which is a specific technique rather than the broader activity of publishing malicious apps in stores.

Publishing Malicious Apps is the best fit because it directly describes the attacker’s action: releasing harmful software into major app stores with the aim of stealing user credentials. When apps are published under the umbrella of a trusted store, users are more likely to trust them and install, enabling the attacker to harvest credentials, often by disguising as legitimate apps or requesting sensitive permissions.

Other terms refer to different behaviors: wardriving is about locating wireless networks, which isn’t related to app stores; SMiShing is phishing via mobile text messages, not about apps being published in stores; repackaging legitimate apps describes tampering with a real app to inject malware, which is a specific technique rather than the broader activity of publishing malicious apps in stores.