malicious library

SmartTube, a YouTube client for Android TV, experienced a security breach where an attacker infiltrated the developer's signing keys, allowing the distribution of a compromised update that included a malicious library, libalphasdk.so. Google Play Protect issued warnings about the suspicious build, leading users to discover a hidden file that maintained remote communication channels. Users are advised to change Google Account passwords, conduct antivirus checks, and implement stricter firewall rules. The developer, Yuliskov, plans to address the vulnerabilities and release a new version through the F-Droid store.