Advertisement


Advertisement

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
General News Google removes spyware from Play Store, less than 100 devices affected
Advertisement
#1

Android malware creeping into Google Play store isn’t exactly a new thing. Infected apps are detected on the store every now and then, and they are removed by Google even before anyone realizes or is affected. However, recently a malware was detected by Google, which the company felt it must share with its users. Specifically, Google says it came across a new form of Android spyware called Lipizzan which the company says is somehow linked to an Israeli company working with governments and intelligence agencies across the world.

“Lipizzan is a multi-stage spyware product capable of monitoring and exfiltrating a user’s email, SMS messages, location, voice calls, and media. We have found 20 Lipizzan apps distributed in a targeted fashion to fewer than 100 devices in total and have blocked the developers and apps from the Android ecosystem,” Google wrote in a blog. Google said it could target applications like WhatsApp, Gmail, Skype, and Telegram.

After a detailed research of the malware, the company found that these Lipizzan-infected apps managed to get past Google’s filters, and become available for download on the Play Store using a new approach that relies on two-stage infection process. But thanks to Google’s new Play Protect features, the infection was detected, the Lipizzan apps were removed, and affected devices were notified.

“The first stage found by Google Play Protect was distributed through several channels, including Google Play, and typically impersonated an innocuous-sounding app such as a ‘Backup’ or ‘Cleaner’ app,” Google explains. “Upon installation, Lipizzan would download and load a second ‘license verification’ stage, which would survey the infected device and validate certain abort criteria. If given the all-clear, the second stage would then root the device with known exploits and begin to exfiltrate device data to a Command & Control server.”

Further, for assurance, Google said that fewer than 100 devices affected by the malware. That means the malware affected only 0.000007 percent of Android devices. Since Lipizzan was identified, Google Play Protect removed Lipizzan from affected devices and actively blocks installs on new devices.

Source:
___________________________________________
Airtel Digital HD Recorder / Kerala Vision Digital TV
Reply
Thanks given by:
Advertisement
Advertisement




Possibly Related Threads...
Thread Author Replies Views Last Post
  General News: New feature in Google Maps will show landmarks nairrk 0 198 10-02-2020, 11:51 AM
Last Post: nairrk
  General News: Google Discontinues Paid Chrome Extensions nairrk 0 400 09-23-2020, 07:24 PM
Last Post: nairrk
  General News: Google Drive to delete trashed files after 30 days from October 13 nairrk 0 171 09-19-2020, 03:26 PM
Last Post: nairrk
  General News: Google Duo makes its debut on Android TV: Check details, how it works nairrk 0 116 09-13-2020, 06:04 PM
Last Post: nairrk
  Update: Google bans six apps on Play Store nairrk 0 155 09-02-2020, 06:55 PM
Last Post: nairrk
  General News: Google Maps Saved tab can now help people identify, remember places they often visit nairrk 0 136 08-29-2020, 08:07 AM
Last Post: nairrk
  General News: Google announces updates to Google Assistant Snapshot nairrk 0 168 08-28-2020, 06:44 PM
Last Post: nairrk
  General News: How to Use Google Docs in Offline Mode nairrk 0 159 08-28-2020, 02:26 PM
Last Post: nairrk
  General News: Google Play music to be discontinued nairrk 0 157 08-22-2020, 07:38 AM
Last Post: nairrk
  General News: Google Maps To Become More Accurate And Visually Appealing With New Update nairrk 0 151 08-19-2020, 06:17 PM
Last Post: nairrk

Forum Jump:


Users browsing this thread: 1 Guest(s)
Advertisement