Google: These two ‘popular’ Android apps with millions of downloads sent user data to China – Times of India
Spyware apps are quite common and despite Google’s efforts to purge them from Play Store, they exist and can be dangerous. According to a report by security research firm Pradeo, two apps with close to 1.5 million downloads were allegedly sending user data to China.
Which are the two apps?
In a blog post, Pradeo said that its both applications are from the same developer, “pose as file management applications and feature similar malicious behaviours.” The apps in question are “File Recovery & Data Recovery” and “File Manager”.
How did the apps ‘spy’ on users?
According to Pradeo, these apps are programmed to launch without users’ interaction, “and to silently exfiltrate sensitive users’ data towards various malicious servers based in China.”
The two apps claim that they do not collect any data from users’ devices. Pradeo found that this was inaccurate and that the apps were indeed collecting user data.
What is the kind of data that these apps collected?
Among the data collected by these were users’ contacts, pictures, audio and video files, network provider name, OS version number, device brand and model, country code and more.
Pradeo has alerted Google about these apps but they still exist on the Play Store. Users are advised to delete them if they have installed them. However, as per the blog, these apps aren’t easily uninstalled. “Both of these malware use this technique to make their uninstallation harder. To delete them, users require going to the application list in the settings,” said Pradeo.
Also, Pradeo has three security tips for downloading apps:
- Do not download applications that do not have any reviews while thousands of users.
- Read reviews when there are any, they usually reflect the applications true nature.
- Always carefully read permissions before accepting them.
function loadGtagEvents(isGoogleCampaignActive) { if (!isGoogleCampaignActive) { return; } var id = document.getElementById('toi-plus-google-campaign'); if (id) { return; } (function(f, b, e, v, n, t, s) { t = b.createElement(e); t.async = !0; t.defer = !0; t.src = v; t.id = 'toi-plus-google-campaign'; s = b.getElementsByTagName(e)[0]; s.parentNode.insertBefore(t, s); })(f, b, e, 'https://www.googletagmanager.com/gtag/js?id=AW-877820074', n, t, s); };
window.TimesApps = window.TimesApps || {}; var TimesApps = window.TimesApps; TimesApps.toiPlusEvents = function(config) { var isConfigAvailable = "toiplus_site_settings" in f && "isFBCampaignActive" in f.toiplus_site_settings && "isGoogleCampaignActive" in f.toiplus_site_settings; var isPrimeUser = window.isPrime; if (isConfigAvailable && !isPrimeUser) { loadGtagEvents(f.toiplus_site_settings.isGoogleCampaignActive); loadFBEvents(f.toiplus_site_settings.isFBCampaignActive); } else { var JarvisUrl="https://jarvis.indiatimes.com/v1/feeds/toi_plus/site_settings/643526e21443833f0c454615?db_env=published"; window.getFromClient(JarvisUrl, function(config){ if (config) { loadGtagEvents(config?.isGoogleCampaignActive); loadFBEvents(config?.isFBCampaignActive); } }) } }; })( window, document, 'script', );
For all the latest Technology News Click Here
For the latest news and updates, follow us on Google News.
Denial of responsibility! NewsBit.us is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.
