Trojan masquerading as VPN and secure messenger found on Google Play
Miscellaneous / / June 20, 2023
Check if you have these applications.
Specialists from Cyfirma found in Google Play new spyware. It collects sensitive information from users' mobile devices, including contact lists and geolocation data.
The malware infected the iKHfaa VPN and nSure Chat applications, which masquerade as a VPN and a secure messaging service, respectively. They were uploaded to the marketplace, where they are still available, by SecurITY Industry.
At the same time, the researchers found that the spyware code was borrowed from legitimate software - Liberty VPN. The developers who discovered the virus have already reported it to Google, so the malware should soon disappear from the company's store.
Apparently, the DoNot hacker group, also known as APT-C-35 and SectorE02, is behind the Android spy. Cyfirma experts believe that it is connected with the government of India.
Read also🧐
- Google warned about the dangers of unofficial set-top boxes with Android TV
- How to identify and remove viruses that interfere with Chrome