Android users, this popular music app “steals” information from your phones



Here is a warning for Android users, after the popular CamScanner app was found infected with malware code another android app was caught stealing user information. Researchers at SonicWall Capture Labs have issued an alert on RB music streaming application as it contains spyware related components.
According to the researchers, the app was reusing software code from a relatively older malware called Ahmyth RAT to steal sensitive data from the device. Remote access Trojan (RAT) is malicious code that enters a device through hijacking apps, freeware, or email connections. Once the user executes the executable recordings, the Trojan code enters the framework’s memory and hijacks the application. The said Ahmyth RAT allowed the app to steal sensitive information from the infected device.
“While the original intention was to give victims a fully functional streaming music player to evade suspicion and steal sensitive information in the background, upon application startup a number of features such as streaming music online was not performing as desired, ”SonicWall Capture Labs said in a press release.
Instead, it infected the device with malware that allowed attackers to order RAT to perform functions such as viewing call logs, viewing, and sending SMS. , venous contacts, files and the device’s GPS location.
Debasish Mukherjee, Country Manager India & SAARC, SonicWall said: “It is common to reuse software code to improve the efficiency of the software development cycle and is followed by many developers, including malware developers. It is not uncommon to see malware authors reuse. pieces of code from other malware families or malware that were active in the past. This threat shows how malware authors reuse code from other malware samples and package legitimate applications with malicious code. ”



Comments are closed.