The fake versions of two android apps need to be uninstalled now before your bank account data is stolen

If you have two apps installed on your android phone that you thought were Signal and Telegram messaging apps, delete them immediately if not sooner. According to BGR, the two apps are Signal Plus Messenger and FlyGram and were later removed from the Play Store, Galaxy Store and 3rd party app showcases from where they were sideloaded (installed from 3rd party app showcases) onto the phones Android.

Bogus versions of the Signal and Telegram messaging apps have been installed from the Play Store and Galaxy Store

But these apps weren’t removed before Signal Plus Messenger was listed for nine months in the Play Store and was installed more than 100 times before Google removed it from its app store. FlyGram was created by the same developer and taken down in 2021. Slovak cybersecurity firm ESET said essentially these two apps were versions of Signal and Telegram that delivered malware to phones the apps were loaded on.

The legitimate Signal app on iOS on the left and Android on the right

But just because apps are removed from the Play Store, if you were unlucky to have them downloaded on your phone, they would still be on your phone, ready to do some harm with your personal data until they are removed from your phone. Google has labeled the pair as malicious apps capable of stealing your personal data. If you uninstall these apps from your phone, first make sure you unlink your Signal and Telegram accounts from them before deleting the malicious apps.

ESET researchers say the fake Telegram app could steal basic device information from a phone with the app installed along with sensitive data including the phone user’s contact list, Google accounts and call logs . The researchers also claimed that the fake Telegram app had a feature that backed up app data to a remote server controlled by the attacker.

Malicious app Signal Plus could be used to monitor both sent and received messages and even send them to a remote server from where they could be read. The malware was related to a China-based malware group called BadBazaar. Dedicated websites were created for both apps to make the fake apps look legitimate and included links to install the app on an Android device directly from the Google Play Store.

Both bogus apps could also record phone calls and access the cameras of infected devices. It was initially targeted for users in China, but the targeting has since expanded to include users in Ukraine, Poland, the Netherlands, Spain, Portugal, Germany, Hong Kong, and the United States.

No matter what enticing features you are promised, stick to the legit and official version of the app to install

It makes sense and we certainly aren’t trying to insult anyone who has installed bogus apps, but when it comes to downloading apps to your phone, always stick to the official app available from a legitimate app store, no matter what bogus features you may be promised.

We also recommend that you check the list of connected devices from time to time to make sure that no new unknown devices have accessed your account. And here’s the thing; if you have one or both of the fake apps installed, you may need to buy a new phone or clean your phone to remove any unknown devices from your Signal or Telegram accounts.

Why were both the Signal Plus app and the FlyGram app listed in the Galaxy Store at the same time (even though the listings now say “Application not supported” and “This app is no longer available for purchase or is not supported in this country”) if you have a Galaxy phone, you may want to make sure you have neither installed on your Galaxy phone.

Again, when it comes to installing apps on your phone, sometimes being smart and using common sense isn’t enough to stop attackers from gaining access to your phone. Why enter this position? In this case there was no reason to install a fake version of Signal or Telegram on your phone.

#fake #versions #android #apps #uninstalled #bank #account #data #stolen
Image Source : www.phonearena.com

Bogus versions of the Signal and Telegram messaging apps have been installed from the Play Store and Galaxy Store

No matter what enticing features you are promised, stick to the legit and official version of the app to install

Leave a Comment Cancel reply