It is with great concern that we bring you the news of two deceitful apps that were recently discovered lurking in the Google Play Store. Pradeo, a prominent cybersecurity company, was responsible for uncovering this nefarious duo. Upon detecting their illicit activities, Pradeo quickly notified Google, leading to the removal of these apps from the Play Store. The disconcerting revelation is that these apps contained spyware, discreetly transmitting sensitive user data to servers located in China. We will provide you with the current information available on this issue and offer guidance if you happen to have downloaded these apps.
Let’s delve into the specifics of these apps and their malicious activities. The two apps in question disguised themselves as file management tools and had accumulated over 1.5 million downloads combined. They were called File Recovery & Data Recovery and File Manager, developed by the same entity. Ostensibly, these apps were designed to assist Android users in organizing their files and data. Additionally, both apps guaranteed that they did not engage in any data collection activities.
However, it was discovered by Pradeo that these apps surreptitiously gathered substantial amounts of private user information and transmitted it to China without the users’ knowledge. The stolen data includes contact lists, media files, real-time locations, mobile country codes, network provider details, SIM provider network codes, operating system versions, device brands, and models.
The hackers behind these apps employed deceptive tactics to establish a sense of trustworthiness. They resorted to install farms to artificially inflate the number of downloads, creating an illusion of popularity. This manipulative technique increases the likelihood of potential victims installing the apps. Moreover, each app possessed advanced permissions that allowed them to conceal their icons on an Android Home Screen, making uninstallation more challenging. This maneuver aids the hackers in maintaining their presence on a victim’s device, heightening the risk of unauthorized access or malicious activities.
In response to our inquiry regarding these malicious apps, Google provided the following statement: “These apps have been removed from Google Play. Google Play Protect protects users from apps known to contain this malware on Android devices with Google Play Services, even when those apps come from other sources outside of Play.”
If you happen to have these apps installed on your Android device, it is advisable to remove them manually. However, be aware that Google Play Protect, which provides built-in malware protection for Android devices, automatically removes known malware. Nonetheless, it is important to note that Google Play Protect may not be foolproof in removing all known malware from Android devices. To ensure comprehensive protection, it is recommended to have antivirus software installed on all your devices. By incorporating antivirus software, you can prevent hackers from gaining access to your personal information and receive prompt notifications if any malware is detected. To find the best antivirus protection for your Windows, Mac, Android, and iOS devices, refer to my expert review at Cyberguy.com/LockUpYourTech.
To uninstall an app on your Android device, follow these steps (settings may vary depending on your device’s manufacturer):
1. Open your Settings app.
2. Tap on “Apps & notifications” or simply “Apps.”
3. Select “See all apps.”
4. Scroll down to find the app you want to uninstall.
5. Tap on the app, and then tap “Uninstall.”
6. Confirm by tapping “OK.”
To prevent similar incidents in the future, exercise caution when downloading new apps, even from trusted sources like the Google Play Store or App Store. Prioritize reading reviews and privacy policies to gain a better understanding of the app’s permissions and determine its legitimacy. Beware of app clones, as cybercriminals often create fraudulent versions of popular apps to deceive users into downloading malware. Pay attention to app names, developer names, and reviews to ensure you are downloading the authentic version. Trust your instincts and refrain from downloading apps that seem suspicious, have poor reviews, or exhibit unexpected behavior.
Unfortunately, these hackers have succeeded in duping innocent individuals into downloading their malicious apps. Therefore, it is crucial to remain vigilant and conduct thorough research before downloading any app to our devices. By staying cautious, we can protect ourselves from the headaches caused by these cunning hackers and their malevolent apps.
If you have any insights or suggestions on what more app stores can do to prevent the transmission of our private data to foreign countries like China, please reach out to us at Cyberguy.com/Contact. For more security alerts, remember to subscribe to my free CyberGuy Report Newsletter at Cyberguy.com/Newsletter.
Copyright 2023 CyberGuy.com. All rights reserved. Kurt “CyberGuy” Knutsson is an esteemed tech journalist renowned for his passion for technology, gadgets, and gear that enhance our lives. His contributions can be found on Fox News and FOX Business, where he appears on “FOX & Friends” in the morning. If you have any tech-related questions, be sure to subscribe to Kurt’s CyberGuy Newsletter and share your voice, story ideas, or comments at CyberGuy.com.
Denial of responsibility! VigourTimes is an automatic aggregator of Global media. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, and all materials to their authors. For any complaint, please reach us at – [email protected]. We will take necessary action within 24 hours.
