Shulou(Shulou.com)11/24 Report--

CTOnews.com, May 25 (Xinhua) there are often fraudulent apps in Google and Apple's app stores, some charging high subscription fees and some using fake comments to improve their ranking on the platform. The blog post by Lukas Stefanko, a researcher at Essential Security against Evolving Threats (ESET), a network security company, reveals a more thorny problem: some applications do not begin to show malicious behavior until some time after users download them, using the permissions originally granted to them by users to collect users' sensitive information and send it to developers for illegal activities.

CTOnews.com noted that the article introduced an Android screencap software called iRecorder Screen Recorder, which was downloaded 50,000 times before it was reported and taken off the shelves after it launched in September 2021 and updated malicious code in August of the following year to record a minute of user voice every 15 minutes and send it to the developer's server through an encrypted link.

Lukas Stefanko revealed in a blog post that the software uses open source AhMyth Android RAT (remote access Trojan) code to remotely control users' mobile phones. Stefanko also said that this is not the first time an application has used AhMyth to bypass Google's filtering mechanism.

To protect users' privacy and security, Google is developing new features, such as monthly notification of which apps have changed the way their data is shared, but only if Google finds out in time.

At present, the software has disappeared from Google's Play app store, but it is not clear whether there are other similar "lurkers" in users' phones.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.