The lifestyle app you downloaded may contain malware
A heads up - some fake lifestyle apps that seem to deliver a healthier life may be a killer to your phone. As always - with this threat, be wary of what you download. Around 300 apps on Google Play that were initially promoted to deliver a healthier lifestyle app(s) actually had secret, vicious malware embedded. These apps have had zero functionality, so when you open them up, ads immediately pop up and clog your screen, slowing down your device rate and leaving it almost inoperable.
Additionally, hackers prompt phishing schemes – using fake social media login portals – to steal your credentials such as your email, phone number, or even your bank account information. The app has no functionality other than to deliver phishing attacks and generate malicious pop-up content.
The IAS has caught on to this fraud scheme and identified the hacking campaign as “Vapor”, warning Google users to offload these apps and employ stronger cybersecurity measures, since 65 million individuals have already had their information stolen.
How on earth did these apps did these apps get approved in the first place? According to writer Dhruv Mohan, these apps found a way to bypass Android’s and Google’s strict restrictions by hiding their launcher activities and icons from the initial display. On top of that, they copied the icon style that other trusted apps used. Then, they held back on the app’s UI until the download was complete and later delivered their malware-based coding, leading to successful downloads by unsuspecting users.
At one point, the applications were reduced down to 15, but IAS has worked to ensure it drops to 0. The last thing any organization needs is their company’s information and/or an employees’ information stolen.
Stay vigilant!
Sources:
Security Week: 300 Malicious 'Vapor' Apps Hosted on Google Play Had 60 Million Downloads - SecurityWeek
The Economic Times: Google removes 331 malicious apps from Play Store linked to 'Vapor Operation'
