Researchers at ESET have found a new malware called VajraSpy in several Android apps. Some of these are available on Google’s Play Store. According to researchers, the malware can steal personal data from your device and even record phone calls without the knowledge of the user.
According to the report by ESET, the new VajraSpy malware has been found in 12 malicious apps. Out of which, 6 of these apps were present for over 2 years on the Google Play Store. The other six apps are listed in other third-party app stores. So, check the list of the apps carefully and be careful to avoid sideloading them to their Android phones.
The VajraSpy is a remote access trojan (RAT) code of the Patchwork APT group. It can steal call logs, messages, contacts, and files from an affected device. Moreover, it can even extract messages from WhatsApp and Signal, click photos using the camera, record calls, intercept notifications, and search files on the infected handset. Among the most affected regions are in Pakistan and India. According to ESET Research, the apps on Play Store have been installed in over 1,400 times.
The list of 6 Android apps with VajraSpy malware are:
Privee Talk
Let’s Chat
Quick Chat
Chit Chat
Rafaqat
While the other six apps have been removed by Google, but are available on other app stores are:
YohooTalk
TikTalk
Hello Chat
Nidus
GlowChat
Wave Chat
Though Google has been taking various steps to prevent the invasion of malicious app containing malware to enter the Play Store, many apps with malicious malware that threaten the users privacy and data security have been detected over the years.
Users should avoid using apps like these that can steal data, and record calls, which means all your details are available to the hacker.
USers has been cautioned to always download and install apps from genuine app stores. They should always keep their devices updated to the latest version.
