Friday, July 10, 2015

New Android malware: a fake NES emulator that steals information and makes you pay

We must always be careful when downloading an application from dubious origin (see Identify potential malware for your Android device), because it can be a common method to get malware ready to steal our information, or a way to subscribe to premium SMS or make us pay for something we should not and we do not wanted to when download it. Google has its own antimalware security systems, but something always manages to dodge the safety analysis that Google Play makes to all applications, and this time the alarms have jumped a big way.


This time the danger is for several reasons, because it contains all the potential pitfalls you want to avoid. The application is a seemingly helpless NES emulator, which in principle should not be dangerous, but when we installed are already committed, since the application will start sending our personal information without permission, which is illegal entry. Apart from that, if we are in a place other than China, we will add a list of premium SMS with our bill that could seriously increase our spending if we do not realize and do not cancel it.


It does not end there, because the application also force us to make a payment within the app, no promises to finish running. Payment is made through Paypal or Moneybookers and payment round the 0.49 dollars, something really suspicious, because the payments must be made through Google Wallet so you have greater control on the part of the application store.


It's never a bad time to remember to be careful with the applications, whatever it may be. It is true that Google Play is an environment with a high percentage of safety, with numerous measures to protect users, but there is always a way to bypass the controls, so caution through common sense is always short. It never hurts to sign up to install an antivirus on our smartphone or tablet and always review comments if given some notice.

New Android malware: a fake NES emulator that steals information and makes you pay