According to PhoneArena , Goldoson infects these Android applications due to an unintentional mistake made by app developers when they use third-party libraries containing malware components. These components are reportedly used by app developers to save time in developing certain parts of their applications.
Many applications containing the Goldoson malware have been installed more than 10 million times.
Goldoson was discovered by researchers at the security firm McAfee. The report states that Goldoson can collect a list of applications installed on a mobile device, the names of devices connected and synchronized with the phone via Bluetooth and Wi-Fi, as well as nearby GPS locations. Additionally, the malware can perform ad fraud by clicking on ads that run in the background without the user's consent.
Google and the developers have both been notified about the malware. Many affected apps have had the malware removed by their developers, while others that did not remove the malware from their apps have been removed from the Play Store by Google. Some apps with over 10 million installations that have had the malware removed include L.POINT with L.PAY, Money Manager Expense & Budget, TMAP, and Genie Music. Meanwhile, the Swipe Brick Breaker app, with over 10 million installations, has been removed for not having made the necessary changes. A detailed list can be found on McAfee's website.
Experts also advise that even if apps have had malware removed by the developer and passed Google's safety tests, this does not mean they cannot steal personal data or engage in fraudulent advertising. Users are advised to uninstall them from their devices before reinstalling the latest version from the Play Store.
Additionally, Android users are advised not to install apps from unknown developers and to check reviews from people with real-world experience before using an app.
Source link






Comment (0)