May
20
2022
Hey Young People! Make sure the application on your cellphone is safe, okay?
—
Found more than 200 application on a compromised android Spyware Facestealer has stolen the user’s password. These hundreds of apps include fitness apps, photo editing and puzzles. The app is being exploited by cybercriminals to retrieve credentials login as password and other valuable information.
Meanwhile Spyware Facestealer itself was first discovered in July 2021. The surveillance device is deliberately designed to loot sensitive user data such as passwords Facebook.
“Similar to Joker, another type of mobile malware, Facestealer often changes its code so that it gives rise to many variants,” said Trend Micro analysts in the report, quoted from The Hacker News, Thursday (19/5/2022).
Trend Micro reveals its findings regarding 200 suspected stealing apps password users, according to him there are various kinds of android applications that steal data password 42 users of which are VPN service provider applications. Meanwhile, 20 others are camera applications, 13 are photo editing applications, and another 125 fall into the miscellaneous category.
Furthermore, Trend Micro mentions that there are more than 40 crypto mining applications that try to trick users by offering paid services or clicking on ads with the lure. token crypto abal-abal.
One of the dangerous crypto mining applications is Cryptomining Farm Your own Coin, the application can even retrieve mnemonic phrases that are usually used to recover crypto wallets when they are lost.
While Trend Micro did not disclose the names of the apps that allegedly stole passwords belonging to these users, they did highlight several apps that could potentially commit similar breaches cited from India Ttoday, such as:
- Daily Fitness OL
- Enjoy Photo Editor
- Panorama Camera
- Photo Gaming Puzzle
- Swarm Photo
- Business Meta Manager
- Cryptomining Farm Your own Coin
Hundreds of these applications have now been removed from the Play Store. Users who have already downloaded are expected to immediately delete and change their social media passwords, especially Facebook.
—
:quality(80)/cdn-kiosk-api.telegraaf.nl/7133f986-d887-11ec-af3c-02d1dbdc35d1.jpg?resize=150%2C150&ssl=1)