Google Play apps were stealing texts and secretly recording calls

Google Play apps were stealing texts and secretly recording calls

All the apps had unassuming names like "Cleaner", "Backup", or "Sound Recorder" Google said.

Google Play Protect detected Lipizzan in 20 different apps that had been distributed in a targeted fashion to fewer than 100 devices.

The malware, dubbed Lipizzan, includes references in its code to Israeli start-up Equus Technologies, which claims on a sparse LinkedIn page to develop "tailor made innovative solutions for law enforcement, intelligence agencies, and national security organizations".

Google recently took down 20 professionally developed malicious Android apps that were capable of spying on a target's location and messages.

"Upon installation, Lipizzan would download and load a second "license verification" stage, which would survey the infected device and validate certain abort criteria".

If the device gets the green light the malware will root it with known exploits and exfiltrate data to a C&C server, Google explained.

Axis Bank is all set to buy FreeCharge for Rs 400 crore
The bank has continued to leverage its strong retail franchise, resulting in a year-on-year growth of 19% in the retail portfolio. As far as net NPAs are concerned, it stood at 4.86% during the quarter compared with 3.01% in Q1FY17 and 4.89% in Q4FY17.

In that second stage, it could take screenshots and photos, steal user data on contacts and files, record calls, monitor location, and even record from the device microphone.

The data collected was able to be accessed from apps including Gmail, Hangouts, LinkedIn, Skype, and Snapchat, as well as collecting messages sent and received by Whatsapp, Telegram, and Viber, which encrypt data in an attempt to make it hard for attackers to intercept messages while their are travelling to their destination.

The spyware was able to bypass Google's Bouncer security system by splitting into two stages.

Google blocked the first set of Lipizzan apps, but even then new versions were uploaded within a week of the takedown; this time created to look like apps including notepads, sound recorders and alarm managers. The new apps were uploaded within a week of the takedown, showing that the authors have a method of easily changing the branding of the implant apps. It had caught hold of one such malware and dealt with it before it could cause major havoc and as a subsequent result has also launched the Google Play protect security feature to insulate users from any such nasty malwares.

Back in April, researchers at Google discovered an Android malware, called Chrysaor, that could give an attacker remote control of the infected device.

The availability of multiple app stores to Android users, and the less stringent app review process, have contributed to the rise in malware in Google's mobile ecosystem.

Related News:

  • Amazon's Q2 sales up 25% to $38bn

    Amazon's Q2 sales up 25% to $38bn

    The cloud division of Amazon reported a 42 percent increase in revenue compared to the previous year, although profits were flat. The company also forecast an operating income of US$300 million to a loss of US$400 million for the current quarter.
    Samsung Pay might be heading to non-Samsung phones

    Samsung Pay might be heading to non-Samsung phones

    The favourable reception of Samsung's Galaxy S8 and S8 Plus has indeed translated into good n terms of sales and profits . The most impressive fact is that Samsung's mobile division estimated for 29 percent of the company's profits this year.
    BJP Office Allegedly Attacked by CPI(M) Activists in Thiruvananthapuram, Workers Vandalise Houses

    BJP Office Allegedly Attacked by CPI(M) Activists in Thiruvananthapuram, Workers Vandalise Houses

    Chief Minister Pinarayi Vijayan should explain and order a probe into "conspiracy of police officials in the attack", he said. A number of clashes broke out between CPM and BJP workers on Thursday late night in Thiruvananthapuram .
  • Republican lawmakers rally around Sessions as Trump intensifies pressure

    Dianne Feinstein, Calif., the ranking Democrat of the Senate Judiciary Committee, said, "What's happening is just bad ". John McCain, R-Ariz., wondered "How we can stop the president from firing the people he appointed I don't know".
    Antonio Conte questions Tottenham's Premier League title ambitions

    Antonio Conte questions Tottenham's Premier League title ambitions

    Conte praised Tottenham's progress but stressed it was easier for them to develop talent due to their lower expectations. But Conte , who led Chelsea to the title last season, added: "If [Spurs] don't win the title, it's not a tragedy".
    Paulo Dybala: 'I'm happy at Juventus'

    Paulo Dybala: 'I'm happy at Juventus'

    But the Italian side couldn't claim the trophy, beaten 4-1 by Real Madrid in the Cardiff final in early June. First, you find out the first official confirmation that Neymar is moving to Paris Saint-Germain .
  • Dortmund allow Merino to discuss transfer as Newcastle move nears

    Dortmund allow Merino to discuss transfer as Newcastle move nears

    Newcastle manager Rafa Benitez added: "Mikel is a midfielder with talent, an U21 global for Spain ". The 21-year-old only joined the German outfit last year, arriving from Osasuna for a €3.85m fee.
    WhatsApp for Android beta adds App Shortcuts: Here's how to use

    WhatsApp for Android beta adds App Shortcuts: Here's how to use

    Especially so because the Facebook-owned company just announced that it has over 250 million daily users on the Status feature. The multi-faceted app can be used for sharing texts, photos and videos , as well as connecting via voice and video calls.

    Juniper Networks, Inc. (NYSE:JNPR) Technical Analysis and Chart Patterns

    Over the last five days, shares have faced -4.46% losses and now is up 0.78% since hitting its 200-day moving average of $28.53. Acrospire Investment Management LLC increased its stake in shares of Juniper Networks by 837.8% in the first quarter.
  • Citizenship scandal: Pauline Hanson's older sister may replace One Nation's Malcolm Roberts

    Citizenship scandal: Pauline Hanson's older sister may replace One Nation's Malcolm Roberts

    But he said it took months of badgering to get Britain to confirm his status and that did not happen till well after the election. Roberts, from Queensland, was born in India to a Welsh father and Australian mother.
    Amazon plows ahead with high sales and spending; profit plunges

    Amazon plows ahead with high sales and spending; profit plunges

    However, he said, "We really think it will be a big boost for us as we expand our grocery and consumables offering". Analysts had expected operating income in the third quarter of $931 million, according to FactSet StreetAccount.
    Huawei Mate 10 will be 'even more powerful' than the new iPhone

    Huawei Mate 10 will be 'even more powerful' than the new iPhone

    The CEO also confirmed that the Mate 10 will sport a better camera and it will be equipped with long lasting batteries as well. Richard also added that they are discontinuing the lower end Huawei devices as they are not making enough profit out of them.


Most liked

The Sims 4 Will Be Releasing On Console In November
It comes with additional hot tubs and a number of outdoor decor items for creating an oasis in your back garden. EA has also promised regular game updates following the console release, too.

British Airways Owner IAG Posts 45% Jump in Quarterly Earnings
IAG's share price has been volatile this morning, having lost 0.67 percent to 590.00p as of 10:31 BST, after surging more than 0.7 percent earlier in the session.

Bad future performance Ahead?: American Airlines Group Inc. (AAL)
The sale was disclosed in a document filed with the Securities & Exchange Commission, which is available through this hyperlink . This change led market cap to move at $25.34B, putting the price -6.37% below the 52-week high and 54.58% above the 52-week low.

James Corden sings musical takedown of Trump's trans military ban
He also points out that Trump's logic of banning transgender citizens in the army to save budget is totally flawed as in reality "it only saves that budget 0.04%".

For Namaz, Nitish Kumar Cuts Trust Vote Speech To 12 Minutes
Only last week, India's Central Bureau of Investigation had conducted raids at the premises of Lalu and Misa in Delhi and Patna . Everything will now depend on the number of mistakes that Prime Minister Narendra Modi and BJP make in the next two years.

Chris Messina's Danny Will Return For 'The Mindy Project' Season 6
Although the actress has confirmed her pregnancy, she is yet to reveal who the father of the child is. "The episode is a little bit about mom shaming and that's cool".

Wisconsin Economist Questions Foxconn Deal
Walker said Wednesday that Foxconn workers in Wisconsin will make an average salary of more than $53,000, plus benefits. Foxconn would also be allowed to skip another $150 million in sales tax on material purchases like building goods.

Bravo waiting for Sanchez 'with open arms' at Manchester City
The Gunners managed to end the season on a high note after a 2-1 win against Premier League champions Chelsea in the FA Cup final. The forward, who is pictured wearing a scarf while indoors, uploaded a photograph on Instagram alongside his dog.

Dowry law: First examine complaint then arrest SC says in landmark verdict
The Court also stated that impounding of passports and Red Corner Notices for people residing overseas should not be a routine. The top court directed that a designated police officer should be appointed to deal with complaints under Section 498A .

UPSC declares result of civil services prelims examination
The candidates are requested to visit the Commission's website (http://www.upsc.gov.in) for updates in this regard. After which the candidates will need to enter their details which are available on the hall ticket.

Check Out The LawBreakers PC & PS4 Open Beta This Weekend
However, keep in mind that these downloads are only available until tomorrow, so get it done soon if you plan to. The pre-load is available now on Steam and the event will start at the following times.

Trump Praises Law Enforcement in Fighting MS-13 Gang
Sessions' trip to El Salvador followed up on Trump's April promise in which he said he would get rid of the gang in America. Congress to allocate more money for immigration agents and judges, a senior administration official told reporters.

One final ride for Cena, Marine bomb dog diagnosed with cancer
Hundreds of people attended to say goodbye to Cena, whose body was carried away in a USA flag after he was put to sleep. A final ride for a veteran K-9 who served in the Marines - that's what Cena's owner wanted, and what he got.

Trump dines with Sean Hannity, former Fox executive Bill Shine and Scaramucci
But let me tell you about myself. "If he's gonna be that divisive, I'm not sure he's gonna be very useful to the President". It's worth noting that there was in fact no leak behind Politico's publishing of Mr Scaramucci's financial disclosure form.

IN officer dies after shot multiple times
That person and a second occupant, who was injured in the crash, were taken the hospital and were being held there by the police. A Southport Police Department officer has been shot along Madison Avenue in a residential area in southern Marion County.