Recently, security solutions company Pradeo made a shocking discovery regarding two file management applications on the Google Play Store. These apps, with over 1.5 million installations, have been found to be malicious and pose a serious threat to the data security of those who have downloaded them.
What makes these apps particularly dangerous is their ability to operate without any user interaction. They can start on their own, quietly working in the background, while stealing sensitive data from your device without your knowledge. What's more alarming is that the stolen data is being sent to servers in China, potentially falling into the wrong hands.
Thanks to Pradeo's behavioral analysis engine, which actively looks for suspicious app behavior, these malicious applications were identified. Here's a breakdown of the data they exfiltrate from your device:
- Users' contact list: The apps access and scrape the contact information stored in your device's memory, as well as details from your connected email accounts and social networks.
- Media files: Pictures, audio, and video files can be stolen without your consent.
- Real-time user location: The apps have the capability to track your location, compromising your privacy and potentially putting you at risk.
- Device information: The apps gather various technical details about your device, such as the mobile country code, network provider name, network code of the SIM provider, operating system version number, and device brand and model.
These apps go to great lengths to remain hidden, such as concealing their home screen icons. This deliberate tactic aims to prolong their presence on your device, allowing them to continue stealing data undetected.
Pradeo has also uncovered another concerning aspect of these apps. They suspect that the number of installations has been artificially inflated by bots to create an illusion of popularity and trustworthiness. This manipulation can mislead users into thinking these apps are safe and reliable, while in reality, they pose a significant threat to their data security.
Be cautious when installing applications. Read user reviews and ratings before installing any app. Pay attention to any negative feedback or warnings from other users regarding data security or suspicious activities. Carefully review the permissions it requests. Regularly update your apps and operating system.
Remember, your data security is of utmost importance. By staying informed and taking necessary precautions, you can protect yourself from falling victim to malicious apps that seek to steal your personal information.