NewApp Digest
search bot

malicious apps

Amazon Appstore used to spread Android malware — delete this malicious app right now
AppWizard
December 20, 2024

Amazon Appstore used to spread Android malware — delete this malicious app right now

Researchers at McAfee Labs found a malicious app named BMI CalculationsVsn on the Amazon Appstore, disguised as a body mass index calculator. The app activates screen recording when users click the “Calculate” button, potentially capturing sensitive information. Although it was designed to record video, the developer had not implemented the capability to upload recordings. The app could still scan for installed applications and collect text messages. It was uploaded to the Amazon Appstore in early October and was removed after McAfee alerted Amazon. Users who installed it need to delete it manually.
Microsoft Warns Millions Of Windows Users—Your PC Is No Longer Trusted
Winsage
December 18, 2024

Microsoft Warns Millions Of Windows Users—Your PC Is No Longer Trusted

Millions of Windows users are facing issues with the Phone Link app after the upgrade to Android 15 due to new security measures by Google. The update has led to certain notifications being hidden for user protection, particularly affecting notification mirroring for two-factor authentication (2FA) codes. Microsoft confirmed that Phone Link will no longer display notifications containing sensitive information, impacting apps downloaded from the Play Store, while preinstalled applications remain unaffected. Android 15 designates notifications with 2FA codes as ‘sensitive,’ allowing only trusted Notification Listener services to access them. Google introduced these changes to combat one-time passcode (OTP) fraud and protect sensitive content, which includes redacting OTPs from notifications for untrusted apps and securing app activities when OTPs are displayed.
Windows warns Phone Link won’t show ‘sensitive’ Android 15 notifications
AppWizard
December 15, 2024

Windows warns Phone Link won’t show ‘sensitive’ Android 15 notifications

Microsoft's Phone Link application has warned Android smartphone users on the latest Android 15 version that certain "sensitive" notifications, such as two-factor authentication (2FA) codes, will not be displayed on connected PCs due to a new privacy feature in Android 15. This feature restricts third-party applications from accessing sensitive notifications. Users with Samsung devices running One UI 6.1.1 can still view these notifications if the device has requested a "Companion Device Role," but this does not apply to other Android models like Google Pixel or Nothing Phones. A suggested workaround involves disabling the “Enhanced Notifications” option in Android 15’s settings, but this may expose users to risks from malicious applications.
Warning: These 12 Android Apps Could Be Listening to Your Conversations
AppWizard
December 5, 2024

Warning: These 12 Android Apps Could Be Listening to Your Conversations

Smartphones have become essential tools for communication and financial management, but they also expose users to privacy risks. Cybersecurity investigations have found that certain Android applications may secretly record conversations and steal personal information. A report by cybersecurity firm ESET identified malicious apps distributed via Google Play and third-party channels that masquerade as legitimate tools. One tactic used by hackers involves initiating romantic dialogues on platforms like Facebook Messenger or WhatsApp to gain victims' trust before persuading them to install infected apps, such as those containing the VajraSpy Trojan. Malicious applications fall into three groups: 1. Standard Messaging Apps with Hidden Trojans: Apps like Hello Chat, MeetMe, and Chit Chat request access to contacts and phone numbers while secretly gathering sensitive data. 2. Apps Exploiting Accessibility Features: Apps like Wave Chat use Android’s accessibility features to intercept communications from secure applications, eavesdropping on conversations and capturing notifications. 3. The Single Non-Messaging App: Nidus, a news application, requests sensitive information despite lacking messaging capabilities. A list of 12 identified malicious apps includes Rafaqat, Privee Talk, MeetMe, Let’s Chat, Quick Chat, Chit Chat, YohooTalk, TikTalk, Hello Chat, Nidus, GlowChat, and Wave Chat. Six of these were available on the Google Play Store and had over 1,400 downloads before removal. To protect privacy, users should uninstall suspicious apps, change passwords, enable two-factor authentication, run security scans, and exercise caution when downloading apps.
SpyLoan Android malware on Google Play installed 8 million times
AppWizard
December 3, 2024

SpyLoan Android malware on Google Play installed 8 million times

A recent investigation by McAfee identified 15 SpyLoan Android malware apps on Google Play, which collectively received over 8 million installs, mainly targeting users in South America, Southeast Asia, and Africa. These apps disguised themselves as legitimate financial tools, enticing users with false promises of quick loan approvals. Upon installation, users were required to validate their location and submit sensitive personal information. The malware harvested extensive data from users' devices, including SMS messages, GPS locations, and contact lists. Users who secured loans faced high-interest payments and harassment from the operators, who sometimes contacted the borrowers' family members. Notable apps included Préstamo Seguro-Rápido and Préstamo Rápido-Credit Easy, each with 1,000,000 downloads. Despite Google's app review processes, these malicious apps evaded detection. Users are advised to read reviews, check developer reputations, limit app permissions, and activate Google Play Protect.
Google removes several active Android "SpyLoan" apps after McAfee detects over eight million downloads
AppWizard
December 3, 2024

Google removes several active Android “SpyLoan” apps after McAfee detects over eight million downloads

Android users are facing a persistent threat from SpyLoan applications, which are malicious apps designed to deceive individuals into seeking quick loans. A recent investigation by McAfee identified fifteen new SpyLoan apps that have collectively been downloaded eight million times. Although Google has removed these apps from the Play Store, experts expect the threat to continue as cybercriminals adapt their tactics. These apps, categorized as potentially unwanted programs (PUPs), use social engineering to collect sensitive user information by presenting themselves as legitimate financial tools. Users often receive less than the promised loan amount while being required to repay the full sum along with additional fees. In December 2023, Google removed a previous batch of SpyLoan apps that had over twelve million downloads. The latest campaigns are targeting regions like Latin America, Southeast Asia, and Africa, using methods such as requiring a one-time password for download validation. Users are pressured to provide personal information, including identification, employment details, and banking data, which can then be used for harassment and blackmail.
15 SpyLoan Android apps found on Google play had over 8 million installs
AppWizard
December 1, 2024

15 SpyLoan Android apps found on Google play had over 8 million installs

Recent findings by McAfee researchers identified 15 SpyLoan Android apps on Google Play, which have collectively garnered over 8 million installs, primarily targeting users in South America, Southeast Asia, and Africa. These apps use social engineering tactics to extract sensitive user information and secure excessive permissions, leading to extortion, harassment, and financial losses. Many were promoted through misleading advertisements on social media. McAfee reported the apps to Google, resulting in some being suspended while others were updated by developers. The prevalence of SpyLoan activity increased by over 75% from the second to the third quarter of 2024. SpyLoan apps promise quick loans but primarily collect personal information for exploitation. They mimic legitimate financial institutions and request unnecessary permissions, including access to contacts and SMS. Victims face threats such as personal data misuse and harassment. Authorities in Peru raided a call center linked to SpyLoan apps that had extorted over 7,000 victims across Peru, Mexico, and Chile. The issue is global, exploiting users' trust and financial desperation, complicating detection and dismantling efforts.
Breach Roundup: Microsoft Tries Again With Windows Recall
Winsage
November 29, 2024

Breach Roundup: Microsoft Tries Again With Windows Recall

Microsoft has unveiled a preview of its Windows Recall feature, designed to capture screenshots of active windows using on-device AI and store them in an SQLite database. The feature will be opt-in and requires users to enable BitLocker full-disk encryption, activate Secure Boot, and enroll in Windows Hello. Recall aims to avoid capturing sensitive information and allows users to delete snapshots or exclude specific applications. Microsoft has implemented safeguards to protect against brute-force attacks, and the data collected remains encrypted locally. The preview is currently available to participants in the Windows Insider Program for Developers. The U.S. Federal Trade Commission (FTC) reported that nearly 90% of smart device manufacturers lack clear update policies, with 161 out of 184 products reviewed not disclosing software update durations. This lack of transparency may violate the Magnuson-Moss Warranty Act and the FTC Act. Ping Li, a Florida IT professional, was sentenced to four years in prison for acting as an agent for China's Ministry of State Security, providing sensitive information since at least 2012. He pleaded guilty and was fined ,000. Operation "Serengeti" led to the arrest of over 1,000 individuals suspected of cybercrime across 19 African countries, resulting in nearly million in financial losses and the confiscation of around million in stolen funds. The U.S. Department of Justice indicted nine individuals linked to a multi-state money laundering scheme associated with internet fraud, allegedly laundering over million since 2016. NVIDIA released a critical firmware update to address a high-severity vulnerability (CVE-2024-0130) that could allow attackers to steal data and compromise systems. Cybersecurity firm McAfee discovered "spyloan" Android apps on the Google Play Store that aim to steal users' personal data, targeting users in Mexico, Colombia, and Indonesia. An international law enforcement operation dismantled a pirate streaming network serving over 22 million users and generating approximately million monthly, resulting in 102 arrests. Nicholas Michael Kloster, a 31-year-old from Kansas City, was indicted for allegedly hacking into computer networks to promote his cybersecurity services, facing multiple charges with a potential 15-year prison sentence. HDFC Life Insurance in India is investigating a potential data breach involving the sharing of certain data fields with malicious intent.
These 15 Android apps are SpyLoan, you should delete them now
AppWizard
November 28, 2024

These 15 Android apps are SpyLoan, you should delete them now

A report by McAfee’s mobile research team has identified up to 15 SpyLoan apps on the Google Play Store that compromise user privacy by collecting sensitive data without consent. These apps, disguised as legitimate loan services, have collectively garnered around 8 million downloads. Some of the identified apps have been removed or updated to remove harmful features, but users must manually uninstall any previously downloaded malicious apps. The report warns that similar threats may emerge, particularly during the holiday season when cybercriminals exploit increased consumer activity.
Search