‘It steals contacts, files, calls and texts’ as Android owners told to delete six ‘spy’ apps immediately

CYBERSECURITY experts have warned about Android apps that can steal your data and even money.

Researchers from ESET discovered several Android apps are carrying dangerous spyware via a remote access trojan (RAT).

1

Spyware is a type of malicious software, or malware, that is installed on a device without the end user’s knowledge.

It secretly infiltrates your device, stealing sensitive information and internet usage data.

Then, it sends this information back to advertisers, data firms, or third parties, like hackers.

ESET Research found the new cyberespionage campaign is linked to the Patchwork APT group.

Some of the spyware’s espionage functionalities include stealing contacts, files, call logs, and SMS messages.

The software can also extract WhatsApp and Signal messages, record phone calls, and take pictures with the camera.

In fact, its capabilities can be expanded based on permissions given to the app.

HOW IS THE SPYWARE GETTING AROUND?

These unsafe downloads came from apps that purport themselves to be helpful or legitimate tools.

Shockingly, six of the apps bundled with the VajraSpy RAT code were on the Google Play store, while six more were released in the wild.

The apps on Google Play reached over 1,400 installs and are still available on alternative app stores, ESET said.

“Patchwork probably used a honey-trap romance scam to lure their victims into installing the malware,” the research noted.

To date, it seems only users in Pakistan and India have been targeted by the campaign, but that doesn’t mean others won’t or can’t be.

HOW TO STAY SAFE

The trojanized apps went by various names including Privee Talk, MeetMe, Let’s Chat, Quick Chat, Rafaqat, Chit Chat, YohooTalk, TikTalk, Hello Chat, Nidus, GlowChat, and Wave Chat.

If you have any of these downloaded onto your device, delete them immediately.

To detect and remove these apps, you can manually sift through your device or you can run a spyware removal app.

However, you must use genuine security software for this, like Norton or McAfee.

Along with enabling security software, keeping your phone’s operating system up to date can help keep it protected.

You should also avoid downloading any suspicious-looking apps – especially if they’re only available outside of your device’s official app store.

This post first appeared on Thesun.co.uk