It is quite common to find seemingly legitimate apps infected by malware from time to time. This is why it is important for users to always update their devices or look out for articles like this and take action. More than 60 popular apps with a total install base of over 100 million in the Google Play Store are facing a malware attack. The developers of these apps unintentionally added the virus by using a third-party library that had parts that already contained malware. The malware is a new brew known as “Goldoson,” and that is what makes these apps so deadly. The time it might take to construct specific elements of an app is reduced by the use of these components by app developers.
In a statement, Google claims that it does all that is possible to protect users from such malware. In a statement to phonearena, a Google spokesperson said “When we find apps that violate our policies, we take appropriate action. We have notified the developers that their apps are in violation of Google Play policies and fixes are needed to come into compliance. Users are also protected by Google Play Protect, which can warn users of identified malicious apps on Android devices.”
How risky is Goldoson
Researchers at the security company McAfee found Goldoson, noting on its blog that the virus may gather GPS coordinates and the names of Bluetooth and Wi-Fi-connected devices. It will also collect a list of apps that are available on the mobile phone. In addition, the malware has the ability to click on ads that are running in the background without the user’s knowledge or permission.
Gizchina News of the week
The creators and Google are both aware of the infection. Since the developers were just as much of a victim as those who downloaded the infected apps, many of the impacted apps were cleaned up by the developers. However, those who disobeyed Google’s order had their apps removed from the Play Store.
Ensure none of the apps below is on your phone – this is the safest way out
According to the information available thus far, either the affected apps’ developers patched them or Google deleted them from the Play Store. Users must still make sure that they do not have a malicious version of the app on their phones even though it is no longer available in the Play Store. Users must upgrade the software even if the developer has given a fix in order to be safe. Below is the list of apps that is part of this attack. Notably, the list shows the number of downloads. It also shows how what Google or the developer did ie either software upgrade or cut from the Play Store
List of infected apps
- L.POINT with L.PAY 10M+ Updated
- Swipe Brick Breaker 10M+ Removed
- Money Manager Expense & Budget 10M+ Updated
- TMAP 10M+ Updated
- Lotte Cinema 10M+ Updated*
- Genie Music 10M+ Updated*
- Cultureland version 2 5M+ Updated*
- GOM Player 5M+ Updated*
- Megabox 5M+ Removed**
- LIVE Score Real-Time score 5M+ Updated*
- Pikicast 5M+ Removed**
- Compass 9: Smart Compass 1M+ Removed**
- GOM Audio – Music, Sync lyrics 1M+ Updated*
- TV – All About Video 1M+ Updated*
- Guninday 1M+ Updated*
- Item mania1M+ Removed**
- LOTTE WORLD Magicpass 1M+ Updated*
- Bounce Brick Breaker 1M+ Removed**
- InfiniteSlice Infinite Slice 1M+ Removed**
- Norae bang 1M+ Updated*
- SomNote – Beautiful note app 1M+ Removed**
- Korea Subway Info: Metroid 1M+ Updated*
- GoodTVBible 1M+ Removed**
- Happy Mobile Happy Screen1M+ Updated*
- UBhind: Mobile Tracker Manager 1M+ Removed**
- Mafu Driving Free 1M+ Removed**
- Girl singer WorldCup 500K+ Updated*
- FSP Mobile 500K+ Removed**
- Audio Recorder 100K+ Removed**
- Catmera 100K+ Removed**
- Cultureland Plus 100K+ Updated*
- Simple Air 100K+ Removed**
- Lotteworld Seoul Sky 100K+ Updated*
- Snake Ball Lover 100K+ Removed**
- Play Geto 100K+ Removed**
- Memory Memo 100K+ Removed**
- PB Stream 100K+ Removed**
- Money Manager (Remove Ads) 100K+ Updated*
- Inssaticon – Cute Emoticons 100K+ Removed**
- ECloud 100K+ Updated*
- SCinema 50K+ Updated*
- Ticket Office 50K+ Updated*
- Lotteworld Aquarium 50K+ Updated*
- Lotteworld Water Park 50K+ Updated*
- T map for KT, LGU+ 50K+ Removed**
- Random number 50K+ Updated*
- AOG Loader 10K+ Removed**
- GOM Audio Plus – Music, Sync l 10K+ Updated*
- Swipe Brick Breaker 2 10K+ Removed**
- Safe Home10K+ Removed**
- Chuncheon 10K+ Removed**
- Fantaholic 5K+ Removed**
- Cinecube 5K+ Updated*
- TNT 5K+ Removed**
- Bestcare Health 1K+ Removed**
- InfinitySolitaire 1K+ Removed**
- New Safe 1K+ Removed**
- Cashnote 1K+ Removed**
- TDI News 1K+ Removed**
- Eyesting 500+ Removed**
- TingSearch 50+ Removed**
- Krieshachu Fantastic 50+ Removed**
- Yeonhagoogokka 10+ Removed**
Please NOTE
As we have said several times before, we reemphasize again that even if an app has been deleted from the Play Store, it may still be able to steal your personal info and click on ads if it is still installed on your phone or tab. In other words, even if they were allegedly cleaned up by the developer and passed Google’s testing, uninstall any of these apps from any of your mobile devices right away. Do not take chances with your device.
Before you install an app from a new developer in the future, save yourself some time and read the reviews left by people who have actually used the app. Red flag warnings should be heeded if you observe an end user claiming that the programme caused his device’s battery to begin draining after installation, or that there are too many ads on their phone. Don’t even bother with an app if it doesn’t pass the smell test. It will be best to just ignore them.
Disclaimer: We may be compensated by some of the companies whose products we talk about, but our articles and reviews are always our honest opinions. For more details, you can check out our editorial guidelines and learn about how we use affiliate links.
Source/VIA :
