Pradeo’s information security experts have discovered at least two apps on Google Play that collect user data and send it to servers of unknown organizations in China. In this respect informs Tech Radar version.
The apps emulated file managers and were called File Recovery and Data Recovery and File Manager. The first was downloaded about 1 million times and the second was downloaded about 500,000 times At the time of the publication of the Pradeo report, Google Play moderators had already removed both utilities from the store.
File Recovery and Data Recovery and File Manager are stated to collect data such as phonebook contacts, pictures, audio and video, geolocation, operating system version, smartphone model and more. When installing the application, they asked for almost all possible permissions and then automatically hidden their icons from the desktop so that they were more difficult to find and remove.
Attackers are not reported because they dispose of the received data. TechRadar believes File Recovery & Data Recovery and File Manager are used for spying.
Former cyber experts from RTM Group declarationThat most Russian passwords can be cracked in just a minute with brute force.