The cybersecurity company ESET reported the spread in the Android environment of 3 malicious appsexploited by cybercriminals to steal personal informations to the victims.
The applications in question were able to easily bypass the controls implemented by the program Google Play Protectspreading a dreaded malware known as XploitSPY. The offending software are:
- Dink Messenger;
- Sim Info;
- Defcom.
According to data released by ESET, the campaign began way back in 2021, with an initial distribution of the aforementioned malware on Android devices in the context of India and Pakistan.
The aggression then seems to have expanded to the point of acting on a global level. Although the three apps were promptly removed from Google Play Storesome users may have installed them on their phone, with potentially devastating consequences for them.
If this is the case, they are advised to immediately uninstall such software and to promptly intervene on the potentially more sensitive apps with respect to external interference (such as those relating to home banking and similar).
XploitSPY and more: here’s how to identify any infections on your Android smartphone
Beyond the campaign just mentioned, it should be considered that it is not known whether XploitSPY is spread through other apps. In order to identify any infection, it is necessary to detect some anomalous behavior on the part of your smartphone.
A sudden performance decrease of the telephone and/or connection, as well as a drums that runs out too quickly, there may be some “symptoms” that should not be underestimated.
If these behaviors are also associated with changes in system settings without user intervention and suspicious movements related to financial apps, your Android device could be a victim of XploitSPY or one of the many infostealer In circulation.
To avoid unpleasant situations, in addition to having a prudent attitude when it comes to downloading new apps and granting permissions to them, the adoption of a antivirus of proven trust can offer an additional level of security.