Although Google has been working hard to combat malware on Android, it sometimes makes mistakes, and fish still slip through the cracks from time to time. Researchers from the security research organization Check Point Research recently shared the relevant details of an Android malware, which uses a super attractive inducement to watch free videos to make people fall into the trap without warning.
Malicious Android app claiming to be able to watch Netflix videos for free also spreads through messaging software
During the epidemic, people drastically reduced going out, and the use of online audio and video entertainment greatly increased. In order to save subscription fees for various services, many people are hoping for free viewing plans. exist Check Point Research The official blog post pointed out that the malware listed on the Google Play Store is called “FlixOnline” and advertises that it allows users to watch Netflix videos from around the world, thereby attracting users to download and install it.
However, this app is not as kind and innocent as it says. It will ask you for some permissions on your phone, allowing it to steal user data and spread it to other users at a faster speed. Once you agree to the permission requirements, the app will be hidden in the Launcher, making it very difficult to remove. The permissions it requires include being able to display on top of other apps, ignore power saving mode, and be able to access notifications. Appearing on top of other apps means the app can disguise itself and display a fake login page on top of other apps, misleading users into entering personal information on this page and sending it to the attacker. Omitting battery saver mode means that the app will not be closed or hibernated in the background, so it can remain active even if it has been idle for a period of time.
▲FlixOnline’s permission requirement page
Being able to access notifications is the trickiest thing. First of all, the application can obtain information from the user’s notifications, including messages you have received. Not only that, the application can also perform quick operations on these notifications, such as replying to messages from social software such as Whatsapp, and then use this to spread the download link from your phone to other contacts, which claims to be able to watch videos for free for two months.
Although this app has been removed from Google Play due to reports, it is very likely that the same type of malware will appear in the future. The emergence of this new model has captured the mentality of ordinary people who are greedy for small gains and want to exploit loopholes. However, they do not know that free products are the most expensive. Therefore, even if everyone is flocking to free products, they still need to maintain a clear mind and make careful judgments and evaluations.
◎Data source:Check Point Research
Source: KOCPC Chinese