Bitdefender researchers have recently uncovered a large population of apps that were infected with malware. The team found tens of thousands of apps being affected by this issue thanks to its latest anomaly detection technology.

Over 60,000 Android apps suffer from hidden malware

The researchers announced a first of its kind app with anomaly detection technology. Bitdefender’s team brought new technology into Bitdefender Mobile Security. This app was used to uncover a hidden malware campaign living undetected on devices all across the globe. The malware detection was carried out for more than six months. The researchers found that the mobile malware has been found running undiscovered for a long time on Android apps.

Bitdefender also found that the malware campaign sought to bring adware to Android enabled devices for the purpose of generating revenue. But this is just one part of the issue as the people behind this can also redirect users to other types of malware as well. This includes banking Trojans to steal the Android users sensitive credentials. Notably, this news also arrives a month after we reported on an Android trojan that was dubbed “DogeRAT”, which targeted Indian users and stole their personal and financial information

The researchers have found over 60,000 applications that carry this adware and suspects that there are plenty more apps that are affected by this issue in the app stores. The new anomaly detection technology was first deployed back in October 2022 and already found such a high number of affected apps. But without the new technology, these would’ve likely gone undiscovered for longer. Looking at some of the types of apps that are mimicked by the malware:

• Game cracks
• Free VPN
• Netflix
• Fake Tutorials
• Fake security programs
• Games with unlocked features

RELATED:

• Android trojan “DogeRAT” targets Indian users, stealing personal and financial information
• ‘Daam’ malware infects Android, exposing call records, browsing history; Govt issues advisory
• Google Play Store Is Not Safe: Popular App Secretly Recorded Users’ Voices for almost a Year
• Top 5 3D Printers of 2023: Bring Your Ideas to Life
• Top 4 Best Fancy Name Generator Tools for BGMI

(Source)

The post Bitdefender finds over 60,000 Android apps with Malware with new tech appeared first on Gizmochina.

Google has flagged several apps made by Pinduoduo, a Chinese e-commerce giant with almost 800 million active users, as malware. The apps were found to contain malicious code that could monitor users, according to multiple Chinese security researchers. The company’s official app has been suspended from the Google Play Store while Google investigates the matter further.

An anonymous security researcher analyzed the apps and found that they were exploiting several zero-day vulnerabilities to hack users. The malicious apps were not available on Google Play but were found in the custom app stores of major phone manufacturers such as Samsung, Huawei, Oppo, and Xiaomi.

Google has set Google Play Protect to block users from installing malicious apps and to warn those who have them installed to uninstall them. Ed Fernandez, a Google spokesperson, said, “off-Play versions of this app that have been found to contain malware have been enforced on via Google Play Protect.”

It is important to note that Google Play is not available in China, which is why the malicious apps were not found on the Google Play Store. However, the fact that they were present in the custom app stores of major phone manufacturers raises concerns about their security protocols and screening processes.

Pinduoduo has not responded to requests for comment on the matter. The incident highlights the ongoing threat of malware and the importance of downloading apps only from trusted sources. Users should exercise caution when downloading apps from unknown sources and should ensure that their devices have appropriate security measures in place to protect against malware and other cyber threats.

RELATED:

• Google Pixel 8 series design compared to Pixel 7 series in latest leaked renders
• Google Pixel 6 & Pixel 6 Pro receives 5G support in India
• Google Photos Develops Video Unblur Tool and Effects for Pixel 8 Series
• Alleged Google Pixel 7a prototype Selling on eBay months before Launch
• Google Rolls Out Android 13 QPR3 Beta 1 to Pixel Devices
• Best OnePlus 11 Case 2023 – Sandstone, Silicone, Hybrid & More

(Source)

The post Google Identifies Malware in Popular Chinese E-Commerce Giant Pinduoduo’s Apps appeared first on Gizmochina.

As the name suggests, ransomware is malicious software that is built to steal and “kidnap” users’ data. The data is them held to ransom, with users having to pay to receive the data back. Now, a new sophisticated ransomware has just been discovered that is rather hard to detect and becoming a new threat.

Earlier this month, the Microsoft 365 Defender Research Team wrote a report to the about the latest evolution of mobile Ransomware. In the report, the research team “found a piece of a particularly sophisticated Android ransomware with novel techniques and behavior, exemplifying the rapid evolution of mobile threats that we have also observed on other platforms. The mobile ransomware, detected by Microsoft Defender for Endpoint as AndroidOS/MalLocker.B, is the latest variant of a ransomware family that’s been in the wild for a while but has been evolving non-stop.”

Editor’s Pick: Huawei Mate 40 Pro with Kirin 9000 scores 690K+ on AnTuTu benchmarks, scores slightly lower than Exynos 1080

This ransomware family has been known for a while and has been found on various websites and has been circulating online through forums, various pop up ads, cracked games, and other forms of media. According to the PhoneArena report, the report also added that “the new variant caught our attention because it’s an advanced malware with unmistakable malicious characteristic and behavior and yet manages to evade many available protections, registering a low detection rate against security solutions.”

Furthermore, the hackers apparently are “evolving” this malware by using various accessibility features and the virus is continuously getting better at its intended purpose. Viruses and malware aren’t just for laptops and computers, with the number of smartphone users growing, the amount of harmful software like ransomware has been growing. So make sure to be safe never click on any flashy links, ads, or pop ups.

UP NEXT: Vivo V20 with 44MP selfie camera, 64MP triple rear cameras, and Snapdragon 720G launched in India for Rs 24,990 (~$340)

The post New evolving Ransomware discovered, “kidnaps” user data on Android devices appeared first on Gizmochina.

In recent Android builds, the operating system has offered its users an improved degree of control over what resources or areas an application has access to. However, this system is still abused by many applications that do not require many of the permissions they require to operate. Now, a Chinese developer’s apps have been labeled as ‘Spyware’ from a research team that suspects that 100 million Android users have already been affected.

The research team is from VPNpro that claimed that the developer behind the app also has at least 50 million installs and its apps request “dangerous permissions.” Notably, VPNpro also claimed that one of their apps also has a malicious remote access trojan hidden within it. These applications were found in Google’s Play Store and were made from a Chinese developer and its local subsidiaries. Reportedly, this practice has been seen before with developers hiding behind a network of different subsidiaries.

Editor’s Pick: HMD Global announces Nokia C5 Endi, Nokia C2 Tava, and Nokia C2 Tennen for Cricket Wireless

The Chinese developer behind the abuse was the Hangzhou-based QuVideo Inc. It is best known for its popular video editing app, VivaVideo. This application is extremely popular since it offers its services for free, with the Play Store showing 100 million installs. VivaVideo is also one of the 40 Chinese apps that have been listed as ‘malicious-ware’ or ‘spyware’ by the Indian government back in 2017.

The apps from QuVideo are available on Apple’s iOS as well. However, due to the permissions system and boundaries being different, the abuse of a similar nature isn’t present on that platform. So, those that have these applications are warned to check what permissions you are granting the app.

UP NEXT: Motorola One Vision Plus Geekbench listing reveals Snapdragon 665 and 4 GB RAM specs

(Via)

The post 100 Million Android users are affected by this Chinese Spyware App appeared first on Gizmochina.

The results of a study of by Kaspersky cyber security firm earlier this month revealed that Android 2.3 Gingerbread is the most attacked OS by malware.

According to data from the Kaspersky Security Network, from about 1.3 billion threat of malicious software in the Google platform which successfully blocked by Kaspersky in the third quarter of this year, as many as 28 percent targeting to Android version 2.3.6 aka Gingerbread OS.

The number is the highest among the other Android versions. The second sequence is occupied “Ice Cream Sandwich” (Android 4.0.4 aka ICS) which is the target of 22 percent of attacks.

This is not surprising given the relative Gingerbread version of Android is still the most widely used today, according to visitor data from Google Play Store. In response to the large number of malware that attack Android, Google has taken steps to improve the security of the operating system.

Google’s efforts, among others, is implementing a number of new security features in the latest version of Android (4.2, Jelly Bean) to prevent the installation program containing malware. While Google Play Store has “Bouncer” feature for filtering malicious applications to avoid being circulated within the Android ecosystem.

Overall, Kaspersky noted a significant decrease in the number of Android malware threats from 14,923 in the second quarter to the third quarter of 9130 in 2012.

The post Android 2.3 Gingerbread is most attacked OS by Malware appeared first on Gizmochina.

Disguised as mobile security applications, virus protection is managed through Google and enter the Play Store. The impact of malicious programs that can be generated is also quite dangerous.

The virus was named FakeLookout.A, and was discovered by antivirus manufacturers TrusGo. This malware to sneak in an application called ‘Updates’ Good artificial Byte Labs, malware glance is similar to Lookout Mobile Security app.

But it just seems to be, if explored further this program will steal information from its host Android devices. The data is then sent to an FTP server that is located in Thornton, Colorado.

“This application is not only detrimental to the victim, but also damage the reputation of the developer (who imitated-ed),” wrote Xuyang Li, CEO TrustGo. As quoted from PCMag, Friday (10/19/2012).

TrustGo also explained that the program was able to steal fake SMS / MMS, Video, and some other files that may be stored on the memory card. This makes it as one of the malicious programs that warrant concern.

But until now there has been no report on casualties were trapped virus.

The post Dangerous virus stay in Google Play Store appeared first on Gizmochina.

The U.S. Federal Bureau of Investigation, FBI, warns the users of Android devices that two new malware seemingly created specifically to attack Google’s operating system.

Internet Crime Complaint Center (IC3), a division of the FBI said the two malware were named Loozfon and FinFisher is designed to steal information from the victim device. This malicious program spread out in various ways, but in many cases to hide behind false advertising.

“IC3 make the caveat that there are a number of malware that attacks Android mobile operating system. Some are known as FinFisher and Loozfon,” IC3 said in a statement.

According to the IC3, Loozfon malware works by sending an email to prospective victims. The email contained the offer of jobs that can be done from home, and included a link. When the link is clicked, the Loozfon malware immediately installed and then subsequently will steal contact details in the phone book as well as the users’ personal data.

Meanwhile, FinFisher malware works by posing as a system update. This malware has the ability to spy (spyware) that also has the ability to take over the smartphone or tablet.

To protect themselves against the threat that the FBI recommends Android users to ensure that the features and functions that are not used to minimize the attack off.

The FBI also warned users of Android devices also careful when connected to unsecure WiFi connection or when using an application that allows to enable geo-location.

The post Beware, two new malware attacking Android devices appeared first on Gizmochina.