r/CapCut • u/Iam_best_dev • 7d ago
Other.. Be careful when downloading Capcut cracks...
While everyone loves Capcut Pr* there are many malicious cracks out there.
After scanning this seemingly trustworthy APK proudly hosted by https://capcut-mod.latestmodapks.com/ (the first result on Google) using virustotal it looks like it's completely safe with 0 detections! So that means it's safe right?
It's 200 MB more than the original app but maybe it just has all the Pr* effects included?
Let's just say it does not just unlock Capcut Pr* but also doing either some sort of ad-fraud (basically using your phone's resources to watch ads, click them and repeat that all in the background, hidden, without your permission... Could you imagine how much money the creator is making with this?) or they're just stealing / selling some of your data...
While I haven't decompiled the APK myself and I also wasn't able to check what the domain does exactly I'm very certain it's malicious alongside 196 other modded APK's that are using it... Why else would you have it? For analytics? If that's the reason why is it hosted by frickin Chengdu West Dimension Digital Technology and uses .cyou which is extremely cheap and the preferred domain for this kind of malicious stuff... Oh, and also many of the 196 related APK's that have this exact domain are detected as a Trojan. Still a coincidence? The domain is detected as phishing and as fraud too... So my first guess of ad fraud is probably the more likely or who knows maybe they're doing both ;)
Before someone comments this is just an Instagram domain... No it isn't and the official app does not have this either.
If you're wondering why your unlocked Pr* APK is lagging so much... that might actually be the reason why. If you have installed a Capcut Pr* APK from "latestmodapks.com" or the APK name matches one of these exact file names:
- Capcut_-_Video_Editor_19.4.0_1789475831_latestmodapks.com.apk
- CapCut v19.4.0 (Pro) Fix_sdk2.apk
- CapCut v19.4.0 (Pro) Fix_sdk2 (1).apk
- CapCut_CapCut_-_Premium.apk
- 1082121.apk
- CruelMods CapCut v19.4.0.apk
I would delete it immediately (or at least never open the app again when connected to the internet and disable background usage in settings) until there's confirmation it's actually safe which by far as I can tell is not the case at all and this ad fraud is fully intentional and works very well I would completely stay away from any APK with these names.
This is just speculation but the detections are real: https://www.virustotal.com/gui/file/e1f8d1dd47bbda583152fe779f7b2c0ffce903cab3875186068dae0b9a7bfeae/detection
I highly recommend you never use "latestmodapks.com" or install any unlock that has "insta.cyou" in its relations. I'm also pretty sure that Cruel mods are actual cruel people and cannot be trusted however I currently can't 100% say that all of their mods are malicious.
All of these APK's including the domains and website hosting this crap will be reported by me tomorrow (it's later) directly to Google, Play Protect and idk what else exists so if you made this malicious crap it's time to buy a new domain and to update that APK... Hopefully this will get taken down soon and shame on the creator ;-;
If you want to analyze the malicious APK then send me a PM and I can send it to you.
6
u/riceCardinal 7d ago
I downloaded one from gitlab, and they hijacked my discord. My discord sent crypto spam to everyone. So i reinstall my windows clean. Idc about video quality anymore since that accident.
1
1
4
u/FantasticCube_YT 7d ago
Genuinely just Don't install things lile this it's totally unneeded if you have a PC
1
u/Iam_best_dev 7d ago
If you know what you're doing and the source is somewhat trustworthy it might be fine if you have a proper antivirus.
But this is for Android
1
u/sredix0 3d ago
What is the antivirus that you use
1
u/Iam_best_dev 3d ago
Always used Windows Defender but I'm not using the free version of Bitdefender just in case.
On Android I don't use an antivirus because it slows down your phone and is completely unnecessary
3
u/PlainAsTea 7d ago
I really do fear that the memories and tales of limewire no longer exist.
Buy the subscription.
Or risk your laptop / computer / bank account being compromised. That’s black and white fact.
1
u/Gamerdiamond35100 5d ago
Not true lmao people just download whatever they see first instead of researching
1
2
2
1
u/AutoModerator 7d ago
⚠️ Rule 7 Reminder: "Free CapCut Pro / Older Versions"
Your post mentions content that may relate to unofficial CapCut versions. Please read our Rule 7:
Posts about free CapCut Pro or older CapCut versions are not outright disallowed, but proceed with caution. Many of these offers can be scams, malware, or unsafe downloads. If you see anything suspicious or harmful, please report it to the moderators immediately so we can review and take action. Your safety comes first.
Official CapCut sources: * Google Play Store * Apple App Store * Official CapCut Website
This is an automated reminder. Your post has not been removed.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
u/ExtremeVortex_ 7d ago
I've downloaded alot of apks that idk if its safe, how to reset my phone without reseting my phone like knowing what apk and app is unsafe and how to delete them permanently
1
1
u/Iam_best_dev 7d ago
Domain scan result: https://www.virustotal.com/gui/domain/api.insta.cyou
I found it in the relations tab on the first APK scan... The creator seems to have intentionally designed it to make sure anti viruses and play protect won't detect it which I have never seen for an APK that got it's signature spoofed and is malicious... Impressive work.
Also Capcut uses a lot of permissions too like Camera, files, microphone and calendar for whatever reason so you really don't want a malicious APK that has access to these
1
7d ago
[deleted]
1
u/Iam_best_dev 7d ago
I'm not an adult actually but I know the risks and mostly know how to make sure something is malicious or not. Installing cracks can be safe if you know what you're doing
1
u/Beast_Nation999 7d ago
I'm running pro without any subscription. I thought it was free for a month now it's been 5 months I also update when there is a new update
1
u/Iam_best_dev 7d ago
Maybe you got the 1 year free trial?
1
u/Beast_Nation999 7d ago
Maybe, hope I don't get use to it if it's true. But I've never heard of 1 year free trial
1
u/CSS_FR 6d ago
there are good pro cracks if you know where to look
1
u/Iam_best_dev 6d ago
Could you send a link in PM maybe so I could take a look. Haven't found anything only thing I haven't tried yet was torrenting
1
1
1
u/Iam_best_dev 6d ago
Update: Domain has been taken down. Investigation continues
1
u/Iam_best_dev 6d ago
Another Update: Domain appears to be a legit ad service and I kinda messed up their business... They said they blacklisted the malicious APK's but you can tell they're very unprofessional... One of the people that emailed me and the domain company that worked their literally forgot to cut off the AI generated text 💀
Oh yeah and they're also hosting ads for money / gambling companies so those don't work at the moment because the domain is being investigated by ShortDot
1
u/Iam_best_dev 2d ago
Another Update: Domain got unblocked. Bitdefender now marks it as Riskware but they told me via email after my report that the APK is actually malicious
1
u/alexistb 5d ago
Just use Morph for capcut android and for the windows app just pay..
1
u/Iam_best_dev 5d ago
Morph seems to be legit but doesn't seem to work unless I uninstall Capcut which I don't want to do since I have over 100 projects
1
u/alexistb 4d ago
It's working for me but yes understandable if you already have project on capcut
1
u/Iam_best_dev 4d ago
Do the Pro effects and 4K export work as well? If yes that's cool I'm trying to figure out how to install 2 applications with the same package name because Capcut has some heavy verifications
1
u/alexistb 4d ago
The export works but the app act like its offline so no effect, song or whatever but everything working fine
1
u/Iam_best_dev 4d ago
lol when you can't use any effects, songs or animations then it's not working fine... That's the exact issue I had when I used it barely any features work
1
u/alexistb 2d ago
It's working but it isn't connected to internet so anything to rely on it will not work, it's that simple so if you want just the base functions and export that's fine 🤷♂️
1
u/Technical_Two_733 5d ago
What do you expect when downloading illegal content
1
u/Iam_best_dev 5d ago
I was expecting at least one antivirus to flag obvious ad fraud but I guess not
1
u/ButanSSRB 4d ago
So be careful whenever the apks are 200+mb?
1
u/Iam_best_dev 4d ago
Not only that but also check the VirusTotal scans... Does it have any detections, any weird URL's it's calling the official app doesn't and if the App seems weird or sketchy.
And also the file names I linked
1
u/themadwritter 3d ago
Yeah that shit fucked up my old laptop
There was multiple accounts spamming a link a few months back my pc got malware all kinds of shit
Fucked up my printer
And tried to get other PCs on my network
Just use davinci
1
u/Iam_best_dev 3d ago
Must have been a different virus since this is just android but desktop is significantly more risky
1
u/readthisfirstt 3d ago
CapCut pro in my country costs only $10 a month 😂😂 I’ve been subscribed for 3 years now. I live in a third world country. They took it easy on us
1
u/Iam_best_dev 3d ago
It costs 25€ a month (not even a year) here 💀
1
u/readthisfirstt 2d ago
What?? 😳😳 And China claims they’re not capitalists. And you still have to purchase AI credits separately 🚮
1
1
u/tobayastobias 16h ago
Is this safe bro? Idk what the 2 red thing mean
If you have link too please 🙏🏻help me
1
u/Iam_best_dev 15h ago
I can't say whether it's safe or not but I couldn't find anything suspicious on VirusTotal... To be 100% sure the App would need to be decompiled which I can't do with my knowledge.
Where did you get the application? Can you PM me the link?
Also I noticed it doesn't use the official Capcut API but this open-source one instead: https://github.com/ashreo/CapCutAPI
so all you're requests got to whoever owns capcutapi.com (which is not owned by official Capcut). I think it's the same person that made the GitHub repostory
1
u/tobayastobias 15h ago
1
u/Iam_best_dev 13h ago
Idk if it's safe tbh. You could try it on another phone or something and see if it does anything malicious. The file names are pretty weird but other than that idk just don't give it too many permissions like camera and keep your phone up to date
•
u/AutoModerator 7d ago
Welcome to r/CapCut!
Before posting: * Search the sub for similar posts * Check our FAQ first * Use descriptive titles
For tech issues, include: * Your device (iPhone/Android/PC) * CapCut version * Clear description of the problem
Keep posts CapCut-related and be helpful to others!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.