Two spyware sending data to China found in Google Play Store
securityaffairs.com
Two apps on the Google Play Store with more than 1.5 million downloads have been discovered spying on users and sending data to China.
  • 1brokeguy@aussie.zoneEnglish
    16·
    1 year ago

    To save everyone’s time:

    The first app named “File Recovery and Data Recovery” (com.spot.music.filedate) has over 1 million installs, and the second one named “File Manager” (com.file.box.master.gkd) has over 500,000 installs.

    • 133arc585@lemmy.mlEnglish
      29·
      1 year ago

      Because a file manager app asking for Full Disk Access is not suspicious, and Full Disk Access is one hell of a good way to get access to data to exfiltrate. There likely wouldn’t even be suspicion if it also asked for Internet access: if it supports connecting to network shares, you wouldn’t think twice about it having that permission.

    • tal@kbin.social
      4·
      1 year ago

      I assume that one factor is that they necessarily have to have access to your files.

    • Chozo@kbin.social
      2·
      1 year ago

      It’s always apps that you definitely don’t need in the first place. File managers, battery savers, RAM managers, etc. The users who would think to install those kinds of apps, when their phone already likely already has built-in (and probably) better support for that functionality, are the same users malware developers look to target. They’re usually not tech savvy, and less likely to realize that their data’s been compromised, and even less likely to determine who compromised it.

      • SSUPII@sopuli.xyz
        4·
        1 year ago

        I have paid for Xplore because built in file managers ALWAYS absolutely lacking in usability, features and are generally much worse products, or are filled with garbage (or even worse, in the case of MIUI its a privacy nightmare). Xplore is the only file manager that has made me not use a ES File Explorer apk made for Android 4 from 2014 that I still used into the start of this year 2023 (from before the Cheetah Mobile acquisition, that turned the app updates into malware). This ancient version of ES File Explorer STILL works almost perfectly in Android 12.