[ad_1]
A serious new warning has been issued this week urging Android users to check their phones for a series of highly dangerous apps that can not only steal your personal data but also record your phone calls. If you have any of these installed, remove them immediately.
This is the latest warning against malicious apps in both Google’s Play Store and third-party Android app stores that are riddled with “Users beware” patches.
The VajraSpy remote access Trojan (RAT) was identified by ESET’s research team, which identified “12 Android spy apps that share the same malicious code,” six of which were found to be unresponsive despite defensive measures. “It was available on Google Play.”
ESET believes that the RAT is from the Asian Patchwork APT group. According to the team, these apps were “advertised as messaging tools, apart from masquerading as news apps. “It has a spy function.” It steals contacts, files, call records, SMS messages, and some of its implementations can also extract WhatsApp and Signal messages, record calls, and take photos. ”
There were very few installs from the Play Store, mostly limited to Asia, but it’s unclear how many apps were downloaded from third-party stores. While Google’s official store is much safer than alternative stores, the fact that these apps sneaked into the Play Store in the first place is cause for concern.
These apps appear to be more targeted than other recent malware alerts. Users were often sent links through chat apps under the guise of online romance. However, the app is also available in the store and can be installed by anyone.
Other recently released malware-laden apps have been downloaded millions of times. A complete list of dangerous apps can be found below.
Examples of infected apps
ESET
This is the third such warning for Android in recent weeks, following reports from SpyLoan and Xamalicious. And this matches the current headlines about app store security. Apple has repeatedly opposed opening up its ecosystem to third-party stores for security reasons. It is currently forced to do so by Europe’s Digital Markets Act (DMA). Stories like this don’t bring much comfort.
In response to ESET’s report, Google clarified that it “takes security and privacy complaints against apps seriously” and confirmed that “all reported apps are no longer on Google Play” and that Google Play Protect is Android devices with Google Play Services, which “can alert apps,” are known to exhibit this malicious behavior, even if those apps come from sources other than Play. ”
Users should check out the SpyLoan and Xamalicious apps, as well as VajraSpy. All of these are explained in detail below. You should also look for so-called “copycat apps” hidden on your phone. All of these apps have been removed from the Play Store, but some are still publicly available and will not be automatically removed.
Vajra Spy:
- hello chat
- chatting
- let’s meet
- Nidas
- Rafa Cut News
- tick talk
- wave chat
- private talk
- glow glow
- Let’s chat
- Nionio
- quick chat
- Yahoo Talk
Zamaricious:
- Essential horoscope for Android
- 3D Skin Editor for PE Minecraft
- logo maker pro
- autoclick repeater
- Count easy calorie calculator
- volume extender
- letter link
- Numerology: Personal horoscope and number predictions
- Step Keeper: Easy pedometer
- track your sleep
- volume booster
- Astrology Navigator: Daily Horoscopes and Tarot
- universal calculator
Spy loan:
- AA credits
- Amor Cash
- guayaba cash
- easy credit
- Kashwau
- credit bus
- flash loan
- prestamos credit
- Prestamos De Credito-YumiCash
- use credit
- instant prestamo
- Karterra Grande
- rapid credit
- Finp Lending
- 4S cache
- true naira
- easy cash
As I’ve said repeatedly, the dangers of sideloading will be heavily debated through 2024, with Apple’s changes in the iOS 17 update, and ahead of the iOS 18 update in the fall.
As Apple begins to move beyond App Store exclusivity, more attention will be focused on the vulnerabilities of the Android ecosystem, where finding the right balance between choice and risk is proving impossible. I think that may be the case.
In addition to being wary of unofficial app stores, ESET strongly recommends not installing apps via links sent through chat apps. “Cybercriminals use social engineering as a powerful weapon. We strongly recommend that you do not click on links sent in chat conversations that download applications.”
I would go further and recommend that you don’t download it casually. Any You cannot install an app on your phone unless you are confident in its origin and developer. Once an app is installed and permission abuses are rampant, they can potentially gain access to everything on your device, the keys to your private life.
In the meantime, you might want to check your phone for any of the 40+ apps listed above and start deleting the casual apps you’ve collected over the years that you no longer use. Especially at this time, this is good practice and housekeeping is recommended.
follow me twitter Or LinkedIn.
[ad_2]
Source link
