Dozens of Android apps discovered with spyware bundled with them

Summary: A report from the NCSC has revealed that there are dozens of legitimate-looking Android and iOS apps that are actually masquerading as spyware. Hackers typically use this spyware to spy on minority groups in China.In the past, Apple kicked up a fuss over allowing third-party app stores.

The company, along with Google, has repeated the mantra that downloading from its official stores offers the safest way for users to install apps on their phones. However, over the years, those claims are starting to ring a bit hollow.Hiding in plain sightThis is according to the UK’s National Cyber Security Centre (NCSC).



The organization worked alongside agencies from Australia, Canada, Germany, New Zealand, and the US, where it discovered apps secretly that ran spyware called BadBazaar and Moonshine.Both spyware families hid in plain sight, posing as dozens of legitimate Android apps. However, behind the scenes, it snooped through cameras, microphones, messages, photos, and location data.

Security firms like Lookout, Trend Micro, and Volexity previously discovered and analyzed both BadBazaar and Moonshine malware families.Targeting minority groups and activistsIts targets included Uyghurs, Tibetans, Taiwanese communities, and activists linked to causes China considers threats to its stability.According to the NCSC, “The apps specifically target individuals internationally who are connected to topics that are considered by the Chinese state to pose a threat to its stability, with some designed to appeal directly to victims or imitate popular apps.

”For example, the report lists more than 100 malicious Android apps disguised as Muslim and Buddhist prayer tools. These apps disguised themselves as popular messaging apps like Signal and WhatsApp and Adobe’s PDF reader. An iOS app called TibetOne also made the list.

It appeared on Apple’s App Store back in 2021.The NCSC adds, “The individuals most at risk include anyone connected to: Taiwanese independence; Tibetan rights; Uyghur Muslims and other ethnic minorities in or from China’s Xinjiang Uyghur Autonomous Region; democracy advocacy, including Hong Kong, and the Falun Gong spiritual movement.”So far, Google and Apple have remained quiet and have not issued a statement in response to the NCSC’s findings.

This is a reminder that even when you download apps from official stores, it’s best to check to see who the developer is. Many apps pretend to be made by Google. But when you look closely, you’ll realize Google isn’t the listed developer.

Also, check the app reviews to see if there are any comments that warn you against downloading it.The post Dozens of Android apps discovered with spyware bundled with them appeared first on Android Headlines..