Privacy Breach Alert: Two Spyware Apps on Google Play with 1.5 Million Users Sending Data to China
In a startling revelation, cybersecurity experts at Pradeo, a leading mobile security company, have uncovered two file management apps on the Google Play Store that pose a significant threat to the privacy and security of up to 1.5 million Android users. These seemingly harmless apps, named File Recovery and Data Recovery (com.spot.music.filedate) with over 1 million installs, and File Manager (com.file.box.master.gkd) with over 500,000 installs, have been exposed as malicious spyware designed to covertly collect and transmit sensitive user data to malicious servers in China.
Pradeo's comprehensive report has revealed the disturbing tactics employed by these deceptive apps. Both apps, developed by the same group, engage in surreptitious activities, automatically launching themselves when the device reboots without user consent. Despite their assurances on the Google Play Store that no data is collected, Pradeo's advanced analytics engine has detected a range of personal information being secretly harvested without users' knowledge.
The stolen data includes contact lists, media files such as images, audio files, and videos, real-time location information, mobile country code, network provider details, SIM provider network code, operating system version, device brand, and model. This alarming level of access grants the malicious actors behind the spyware apps a vast array of sensitive user data, leaving the affected individuals vulnerable to potential privacy breaches, identity theft, and other malicious activities.
Google, as the gatekeeper of the Play Store, has been alerted about this security breach, and it is expected that they will take swift action to remove these malicious apps and further tighten their security protocols to prevent such incidents in the future.
In an increasingly interconnected world, where privacy is of paramount concern, incidents like these serve as a stark reminder for users to exercise caution and remain vigilant in protecting their personal information from unscrupulous actors seeking to exploit their digital footprint.
Source: https://thehackernews.com/2023/07/two-spyware-apps-on-google-play-with-15.html