Google has removed three Android apps from its Play Store, and installing them on your phone could leave you with a nasty bill. Mountain View cleared its online market after finding that the trio of apps were able to install the infamous Joker bug. This scandalous malware steals money from Android users by secretly registering it for expensive subscription services that can cost hundreds of pounds a year.
The Google Play Store apps – called Style Message, Blood Pressure App and Camera PDF Scanner – have been found to have Joker malware hidden from Kaspersky researchers.
In an online post, Igor Golovin explained that bad actors are able to ensure that the Joker goes through Google’s security measures, as its malicious payload remains inactive during the verification process, with malicious features becoming active only after the app launches. on the Play Store market.
Golovin explained: “Trojan horses from the Trojan.AndroidOS.Jocker family can intercept codes sent in text messages and circumvent anti-fraud solutions. They are usually distributed on Google Play, where fraudsters download legitimate apps from the store, add malicious code to them, and re-upload them to the store under a different name. Trojan applications fulfill their original purpose in most cases and the user will not suspect that they are a source of threats.
“To bypass the Google Play check, the Trojan is watching to see if it’s live. The malicious payload will remain inactive as long as the application is stopped during the verification phase. “
Since then, the three Android apps have been removed from the Google Play Store. But if you have already downloaded them before downloading the programs, you will need to delete them from your phone.
As a reminder, the apps you should be aware of – which have already been downloaded by thousands of Android users – are as follows …
• Style message (com.stylelacat.messagearound),
• Blood pressure application (blood.maodig.raise.bloodrate.monitorapp.plus.tracker.tool.health) and
• Camera PDF scanner (com.jiao.hdcam.docscanner)
Advising people on how to stay safe, Kaspersky says that even if you download an app from the Google Play Store, be sure to check information such as reviews and developer details to see if the app is made by a reputable or well-known name.
Kaspersky said: “To avoid unwanted subscriptions, avoid installing applications from unofficial sources, which is the most common source of malware. You should not lose vigilance when installing applications from Google Play: read the reviews, read about the developer, terms of use and payment For messages, choose a well-known application with positive reviews.
“Even if you trust an application, you should avoid giving it too many permissions. Allow access to notifications only for applications that need it to fulfill their intended purpose – such as transferring notifications to wearable devices. Apps for something like themed wallpapers or photo editing don’t need access to your notifications. “
Add Comment