A new app has been discovered it’s an Android spyware that sends Data to China. This newly discovered malware comes as a file management app on the Google Play Store.
Cybersecurity analysts uncovered two file management apps available on the Google Play Store that are spyware, putting the privacy and security of up to 1.5 million Android users at risk.
Android spyware that sends Data to China
The apps are called File Recovery & Data Recovery and File Manager. And according to an alert this week from Pradeo, both from the same developer, are programmed to launch without any input from the user.
While the apps say they don’t collect any data from the user’s device, it turns out this wasn’t the case. Pradeo’s behavioral analysis engine found the apps exfiltrate the following data: contacts saved in your device.
Along with email and social network contacts; pictures, audio, and video are compiled in the app. Real-time user location; device brand and model; mobile country code; network provider name; and operating system version number. All without ever requesting permission to collect this information.
The apps can also abuse the permissions the user approves during installation to restart the device and quietly launch in the background.
Both apps conceal their home screen icons to make uninstallation more of a hassle. As users have to go to their application list in the Settings menu to delete them.
So if you have either File Recovery & Data Recovery or File Manager installed and you don’t see them on your home screen. Head to your Settings menu ASAP to get rid of them.
Don’t worry if you find these apps installed on your phone. Removing them is pretty simple and straightforward. And do keep in mind that your data is compromised as long as they stay on your phone.