Scams and threats to avoid, plus new security tools
WATCH OUT FOR...Android apps containing new malware
What’s the threat?
Nearly 350,000 Android phones and tablets have been infected with a previously unknown malware called Xamalicious, after downloading fake apps from the Google Play Store. It was discovered in 14 apps by antivirus firm McAfee. Researchers said the malware can “take full control of the infected device” and act as spyware or a banking trojan without the victim having to do anything. It also clicks on adverts to make money for the hackers.
Three of the apps have been installed more than 100,000 times from the Play Store: Essential Horoscope for Android; 3D Skin Editor for PE Minecraft; and Logo Maker Pro. Three others have been installed more than 10,000 times: Count Easy Calorie Calculator; a fake game called Dots: One Line Connector (pictured); and Auto Click Repeater, which saves taps and swipes on your device to perform automated tasks.
The other apps are Astrological Navigator, LetterLink, Numerology: Personal Horoscope, Sound Volume Booster, Sound Volume Extender, Step Keeper: Easy Pedometer, Track Your Sleep and Universal Calculator.
How can you stay safe?
Google has now removed these apps, but you should check whether you’ve installed any on your device.
They’ve been available to download in different versions since mid-2020, so you may have forgotten that you installed them. The apps have been downloaded in the UK more than any other European country, McAfee said (www.snipca. com/48833). Remove any that you find on your device.
Bear in mind that researchers found a further 12 apps containing Xamalicious on unofficial app stores. Only download apps from these stores if you’re convinced they’re safe.
New tools
Scamio
www.snipca.com/48862
Fraudsters might be using artificial intelligence (AI) to create ever more convincing scams (see Issue 673, page 62), but security firms are also using the technology to bolster tools that protect you. The latest example is Bitdefender’s chatbot Scamio, which analyses text and screenshots and advises whether they’re real or fake.
