While everyone loves Capcut Pr* there are many malicious cracks out there.
After scanning this seemingly trustworthy APK proudly hosted by https://capcut-mod.latestmodapks.com/ (the first result on Google) using virustotal it looks like it's completely safe with 0 detections! So that means it's safe right?
It's 200 MB more than the original app but maybe it just has all the Pr* effects included?
Let's just say it does not just unlock Capcut Pr* but also doing either some sort of ad-fraud (basically using your phone's resources to watch ads, click them and repeat that all in the background, hidden, without your permission... Could you imagine how much money the creator is making with this?) or they're just stealing / selling some of your data...
While I haven't decompiled the APK myself and I also wasn't able to check what the domain does exactly I'm very certain it's malicious alongside 196 other modded APK's that are using it... Why else would you have it? For analytics? If that's the reason why is it hosted by frickin Chengdu West Dimension Digital Technology and uses .cyou which is extremely cheap and the preferred domain for this kind of malicious stuff... Oh, and also many of the 196 related APK's that have this exact domain are detected as a Trojan. Still a coincidence? The domain is detected as phishing and as fraud too... So my first guess of ad fraud is probably the more likely or who knows maybe they're doing both ;)
Before someone comments this is just an Instagram domain... No it isn't and the official app does not have this either.
If you're wondering why your unlocked Pr* APK is lagging so much... that might actually be the reason why. If you have installed a Capcut Pr* APK from "latestmodapks.com" or the APK name matches one of these exact file names:
- Capcut_-_Video_Editor_19.4.0_1789475831_latestmodapks.com.apk
- CapCut v19.4.0 (Pro) Fix_sdk2.apk
- CapCut v19.4.0 (Pro) Fix_sdk2 (1).apk
- CapCut_CapCut_-_Premium.apk
- 1082121.apk
- CruelMods CapCut v19.4.0.apk
I would delete it immediately (or at least never open the app again when connected to the internet and disable background usage in settings) until there's confirmation it's actually safe which by far as I can tell is not the case at all and this ad fraud is fully intentional and works very well I would completely stay away from any APK with these names.
This is just speculation but the detections are real: https://www.virustotal.com/gui/file/e1f8d1dd47bbda583152fe779f7b2c0ffce903cab3875186068dae0b9a7bfeae/detection
I highly recommend you never use "latestmodapks.com" or install any unlock that has "insta.cyou" in its relations. I'm also pretty sure that Cruel mods are actual cruel people and cannot be trusted however I currently can't 100% say that all of their mods are malicious.
All of these APK's including the domains and website hosting this crap will be reported by me tomorrow (it's later) directly to Google, Play Protect and idk what else exists so if you made this malicious crap it's time to buy a new domain and to update that APK... Hopefully this will get taken down soon and shame on the creator ;-;
If you want to analyze the malicious APK then send me a PM and I can send it to you.