Enlarge (credit: portal gda / Flickr)
Hackers have been using Google Play for years to distribute an unusually advanced backdoor capable of stealing a wide range of sensitive data, researchers said on Tuesday.
Researchers from security firm Kaspersky Lab have recovered at least eight Google Play apps that date back to 2018, a Kaspersky Lab representative said, but based on archive searches and other methods, the researchers believe malicious apps from the same advanced group seeded Google’s official market since at least 2016. While Kaspersky Lab's research uncovered only Android apps connected to the hacker group behind the campaign, research published last October by Blackberry Cylance found evidence the group targeted iOS users as well.
Google removed recent versions of the malware shortly after the researchers from Kaspersky, and earlier fellow security firm Dr. Web, reported them. Apps from earlier were already removed, and it’s not clear what prompted the move. Third-party markets have also hosted the backdoored apps, and many of them remain available.
Read 12 remaining paragraphs | Comments
Read More