Malicious Play Store apps put 8 million Android users at risk

While Apple does a great job of keeping its app marketplace safe, Google doesn't quite measure up.

Once they have it, they use it to harass or pressure users into paying ridiculous interest rates. They also use shady tactics like countdown timers or "limited-time" offers to create a fake sense of urgency, pushing people to act fast without thinking it through. Instead of helping with finances, these apps trap users in a cycle of debt and invade their privacy.

McAfee, an App Defense Alliance partner tasked with helping keep the Play Store safe, reported the apps to Google. Google took action, and the malicious versions of the apps are no longer available on Google Play. 

We reached out to Google, and a rep confirmed that Android users are automatically protected against known versions of this malware by Google Play Protect. However, it is important to note that Google Play Protect may not be enough. Historically, it isn't 100% foolproof at removing all known malware from Android devices.

The goal of these malicious apps is to gather as much data as possible from infected devices, which they then use to extort users. Victims are often coerced into repaying loans at sky-high interest rates, with some even being threatened for delays. In extreme cases, the app operators have harassed victims' families and sent death threats, using stolen personal photos as leverage.

These apps request intrusive permissions, giving them access to system data, cameras, call logs, contacts, location, and SMS messages. They justify this data collection by claiming it's necessary for user verification and anti-fraud measures. 

Users signing up for these services are verified through a one-time password (OTP) to confirm their phone number is from the target region. They are also pressured to share additional details like ID documents, bank accounts, and employment information.

2. Download apps from reliable sources: It's important to download apps only from trusted sources like the Google Play Store. You might say I am contradicting myself, but the Play Store is still safer than other options out there. They have strict checks to prevent malware and other harmful software. However, even with the security measures provided by Google Play, downloading apps from the store does not guarantee 100% protection against malware or harmful software. Avoid downloading apps from unknown websites or unofficial stores, as they can pose a higher risk to your personal data and device. Never trust download links that you get through SMS.

4. Take loans from legit institutions: Always take loans from legitimate financial institutions like banks or well-known lenders. Avoid sketchy apps or services promising instant cash with minimal requirements. They're often too good to be true. Legit lenders are transparent about their terms, interest rates, and fees, and they won't demand access to your personal data or pressure you with scare tactics. If you're unsure about a lender, check reviews, verify their credentials, or consult a financial advisor before committing.

It can be tempting to use apps that promise instant loans, especially when you need the money. But they're often just trying to scam you and push you into a never-ending debt cycle. If you need a loan, go to a trusted bank or lender. Protecting yourself from malicious apps like those infected with SpyLoan malware starts with staying informed and cautious. Always scrutinize the apps you download, stick to trusted platforms, and think twice before sharing sensitive information.

Follow Kurt on his social channels:

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2024 CyberGuy.com. All rights reserved.