ANDROID owners have been warned about data stealing apps that look almost identical to several popular online brands.
Hackers have been masquerading as big names including WhatsApp, Instagram, Snapchat, X/Twitter and Google.
Fraudsters use their logos on icons to lure people in, according to security researchers at SonicWall.
The ploy tricks victims into installing a fake app on their smartphones that will steal their data.
Contacts, text messages, call logs and passwords are among the details stolen, experts say.
They can even do stranger things, like turn on your camera’s flashlight or turn on your phone’s vibration.
Once installed, the fake app asks users for two permissions:
- Accessibility Service
- Device administrator permission
“This malware uses famous Android app icons to deceive users and trick victims into installing the malicious app on their devices,” SonicWall warned.
“By requesting these permissions, the malicious app aims to gain control over the victim’s device, potentially allowing it to perform harmful actions or steal sensitive information without the user’s knowledge or consent.”
Most Read on Phones & Gadgets
It’s unclear how long the scam has been around or how many people have fallen victim.
But it demonstrates once again the need to be very careful about what you install on your devices.
WHY YOU SHOULD ONLY DOWNLOAD FROM OFFICIAL APP STORES
Analysis by Jamie Harris, senior technology and science reporter at The Sun
One of the biggest differences between Android and iPhone is where you can download your apps.
The iPhone takes a more closed approach, only allowing you to download apps from the iOS App Store, which keeps everything secure.
On the other hand, Android takes an open approach in trying to give people greater freedom – but this comes at a risky cost.
The fact is that the Google Play Store already has millions of applications.
And while some bad guys may slip through the net, the vast majority are safe.
Not to mention, Google Play Protect scans your apps and devices for harmful behavior.
Therefore, it’s not worth the risk of downloading from an external source – stick to the Google Play Store.
This story originally appeared on The-sun.com read the full story
