Bogus versions of the Signal and Telegram messaging apps have been installed from the Play Store and Galaxy Store
But these apps weren’t removed before Signal Plus Messenger was listed for nine months in the Play Store and was installed more than 100 times before Google removed it from its app store. FlyGram was created by the same developer and taken down in 2021. Slovak cybersecurity firm ESET said essentially these two apps were versions of Signal and Telegram that delivered malware to phones the apps were loaded on.
The legitimate Signal app on iOS on the left and Android on the right
Malicious app Signal Plus could be used to monitor both sent and received messages and even send them to a remote server from where they could be read. The malware was related to a China-based malware group called BadBazaar. Dedicated websites were created for both apps to make the fake apps look legitimate and included links to install the app on an Android device directly from the Google Play Store.
No matter what enticing features you are promised, stick to the legit and official version of the app to install
It makes sense and we certainly aren’t trying to insult anyone who has installed bogus apps, but when it comes to downloading apps to your phone, always stick to the official app available from a legitimate app store, no matter what bogus features you may be promised.
We also recommend that you check the list of connected devices from time to time to make sure that no new unknown devices have accessed your account. And here’s the thing; if you have one or both of the fake apps installed, you may need to buy a new phone or clean your phone to remove any unknown devices from your Signal or Telegram accounts.
Again, when it comes to installing apps on your phone, sometimes being smart and using common sense isn’t enough to stop attackers from gaining access to your phone. Why enter this position? In this case there was no reason to install a fake version of Signal or Telegram on your phone.
#fake #versions #android #apps #uninstalled #bank #account #data #stolen
Image Source : www.phonearena.com