Immediately delete this application on your smartphone if you do not want to be tracked, your bank account is stolen
Researchers at Lab52 have discovered Process Manager malware lurking inside some apps on Google Play. Once installed, the Process Manager malware will try to hide on the victim’s device with a gear icon in a way that distracts the victim and makes them think it’s part of the system.
Once installed by the user, the app will start asking permission to access 18 different items, including messages, location, recordings, camera, modify audio settings, read call logs, read SMS messages, send messages, alarm logs…
It is not clear whether the malware abuses Android’s Accessibility service to grant itself permissions or trick users into accepting requests.
Malware lurks inside the Roz Dhan app. Photo: Lab52
To avoid detection, malware automatically deletes desktop icons and silently runs in the background.
Malware running in the background on the phone. Photo: Lab52
Therefore, if you are installing this application, please remove it immediately by going to Settings – Apps – Manage apps, find the malicious application name and press Uninstall (uninstall). Besides, users should also enable the Play Protect feature on Google Play to limit the mistaken installation of malicious software.
Earlier, French mobile security company Pradeo also warned that Facestealer application has the ability to collect personal data from smartphone users’ Facebook accounts.
Facestealer is a type of Android trojan designed to trick Facebook users into entering all of their login information into a website. When Android users add their Facebook login to the website, the app’s developers (now removed) get access to Facebook subscribers’ credit card data, search information …
This Trojan is embedded inside an application on the Google Play Store called Craftsart Cartoon Photo Tools with a name to attract users who want to download an application to help edit photos.
For Android users who have Craftsart Cartoon Photo Tools installed, uninstall it immediately to protect your credit card and other financial data.
References: Bleepingcomputer, Phonearena
at Blogtuan.info – Source: cafebiz.vn – Read the original article here
