Two spyware sending data to China found in Google Play Store
securityaffairs.com
Two apps on the Google Play Store with more than 1.5 million downloads have been discovered spying on users and sending data to China.
  • 1brokeguy@aussie.zoneEnglish
    2·
    1 year ago

    To save everyone’s time:

    The first app named “File Recovery and Data Recovery” (com.spot.music.filedate) has over 1 million installs, and the second one named “File Manager” (com.file.box.master.gkd) has over 500,000 installs.

    • 133arc585@lemmy.mlEnglish
      21·
      1 year ago

      Because a file manager app asking for Full Disk Access is not suspicious, and Full Disk Access is one hell of a good way to get access to data to exfiltrate. There likely wouldn’t even be suspicion if it also asked for Internet access: if it supports connecting to network shares, you wouldn’t think twice about it having that permission.