EXPERTS have warned Android users to check their phones for three fishy apps riddled with hidden spy tech.
The trio include messaging apps and a VPN, according to cyber security firm Cyfirma.
1
Apparently they can secretly get hold of private details, such as your location and your contact lists.
But even more worrying, researchers believe the information they steal could be used for a “second-stage attack”.
“We believe that the threat actor used a spear messaging attack on Telegram or WhatsApp messenger to lure victims into installing an app using the Google Play store,” the firm said.
Fortunately it doesn’t appear many people have downloaded the apps.
And the vast majority have been detected in Pakistan.
But it’s still worth checking if you have them on your smartphone.
The apps are:
- Device Basic Plus
- nSure Chat
- iKHfaa VPN
Most read in Phones & Gadgets
If you have any of these three on your Android device it’s best to delete them now.
Experts say that the apps were uploaded by a publisher called SecurITY Industry.
The malware behind it has been attributed to notorious Advanced Persistent Threat Group dubbed “DoNot”.
So far iKHfaa VPN has been removed from the Google Play Store but Device Basic Plus and nSure Chat remain active.
Best Phone and Gadget tips and hacks
Looking for tips and hacks for your phone? Want to find those secret features within social media apps? We have you covered…
We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at [email protected]
This post first appeared on Thesun.co.uk
