Google Play apps were stealing texts and secretly recording calls

All the apps had unassuming names like "Cleaner", "Backup", or "Sound Recorder" Google said.

Google Play Protect detected Lipizzan in 20 different apps that had been distributed in a targeted fashion to fewer than 100 devices.

The malware, dubbed Lipizzan, includes references in its code to Israeli start-up Equus Technologies, which claims on a sparse LinkedIn page to develop "tailor made innovative solutions for law enforcement, intelligence agencies, and national security organizations".

Google recently took down 20 professionally developed malicious Android apps that were capable of spying on a target's location and messages.

"Upon installation, Lipizzan would download and load a second "license verification" stage, which would survey the infected device and validate certain abort criteria".

If the device gets the green light the malware will root it with known exploits and exfiltrate data to a C&C server, Google explained.

Dowry law: First examine complaint then arrest SC says in landmark verdict
The Court also stated that impounding of passports and Red Corner Notices for people residing overseas should not be a routine. The top court directed that a designated police officer should be appointed to deal with complaints under Section 498A .

In that second stage, it could take screenshots and photos, steal user data on contacts and files, record calls, monitor location, and even record from the device microphone.

The data collected was able to be accessed from apps including Gmail, Hangouts, LinkedIn, Skype, and Snapchat, as well as collecting messages sent and received by Whatsapp, Telegram, and Viber, which encrypt data in an attempt to make it hard for attackers to intercept messages while their are travelling to their destination.

The spyware was able to bypass Google's Bouncer security system by splitting into two stages.

Google blocked the first set of Lipizzan apps, but even then new versions were uploaded within a week of the takedown; this time created to look like apps including notepads, sound recorders and alarm managers. The new apps were uploaded within a week of the takedown, showing that the authors have a method of easily changing the branding of the implant apps. It had caught hold of one such malware and dealt with it before it could cause major havoc and as a subsequent result has also launched the Google Play protect security feature to insulate users from any such nasty malwares.

Back in April, researchers at Google discovered an Android malware, called Chrysaor, that could give an attacker remote control of the infected device.

The availability of multiple app stores to Android users, and the less stringent app review process, have contributed to the rise in malware in Google's mobile ecosystem.

Related News:

28 July 2017

The Sims 4 Will Be Releasing On Console In November
It comes with additional hot tubs and a number of outdoor decor items for creating an oasis in your back garden. EA has also promised regular game updates following the console release, too.

28 July 2017

Citizenship scandal: Pauline Hanson's older sister may replace One Nation's Malcolm Roberts
But he said it took months of badgering to get Britain to confirm his status and that did not happen till well after the election. Roberts, from Queensland, was born in India to a Welsh father and Australian mother.

28 July 2017

BJP Office Allegedly Attacked by CPI(M) Activists in Thiruvananthapuram, Workers Vandalise Houses
Chief Minister Pinarayi Vijayan should explain and order a probe into "conspiracy of police officials in the attack", he said. A number of clashes broke out between CPM and BJP workers on Thursday late night in Thiruvananthapuram .
28 July 2017

Wisconsin Economist Questions Foxconn Deal
Walker said Wednesday that Foxconn workers in Wisconsin will make an average salary of more than $53,000, plus benefits. Foxconn would also be allowed to skip another $150 million in sales tax on material purchases like building goods.

28 July 2017

Huawei Mate 10 will be 'even more powerful' than the new iPhone
The CEO also confirmed that the Mate 10 will sport a better camera and it will be equipped with long lasting batteries as well. Richard also added that they are discontinuing the lower end Huawei devices as they are not making enough profit out of them.

28 July 2017

Russia Orders US Embassy Staff Cuts in Sanctions Retaliation
Russia's retaliation, outlined in a statement from the Foreign Ministry, came a day after the Senate voted to slap new sanctions on Russian Federation .
Republican lawmakers rally around Sessions as Trump intensifies pressure
Dianne Feinstein, Calif., the ranking Democrat of the Senate Judiciary Committee, said, "What's happening is just bad ". John McCain, R-Ariz., wondered "How we can stop the president from firing the people he appointed I don't know".

28 July 2017

Trump Praises Law Enforcement in Fighting MS-13 Gang
Sessions' trip to El Salvador followed up on Trump's April promise in which he said he would get rid of the gang in America. Congress to allocate more money for immigration agents and judges, a senior administration official told reporters.

28 July 2017

Shania Twain Shines in New 'Life's About to Get Good' Video
The album is the long-awaited follow-up to 2002's Up! " Life's About to Get Good " makes you believe every word from the singer. He "really loved this one particularly, he responded so enthusiastically to it", she tells Taste of Country Nights .
28 July 2017

Amazon's Q2 sales up 25% to $38bn
The cloud division of Amazon reported a 42 percent increase in revenue compared to the previous year, although profits were flat. The company also forecast an operating income of US$300 million to a loss of US$400 million for the current quarter.

28 July 2017

Driver turns Ferrari into fireball in 60 minutes
The high-performance Ferrari 430 Scuderia was reduced to a twisted wreck after the horror crash on the M1 motorway. In a statement on Facebook, police said they asked the driver what kind of vehicle he had.

28 July 2017

UPSC declares result of civil services prelims examination
The candidates are requested to visit the Commission's website (http://www.upsc.gov.in) for updates in this regard. After which the candidates will need to enter their details which are available on the hall ticket.