Fake Pokemon Go App On Google Play Infects Phones With Screenlocker (arstechnica.com) 48
Everytime an app gets insanely popular, vicious minds try to capitalize on the momentum -- and history suggests, Android is their most-targetted platform. So it wasn't really a big surprise when security researchers at Eset announced on Friday that at least three fake, possibly malicious Pokemon Go app have made it to Google Play, Android's marquee app store. From an Ars Technica report: Of the three, the one titled "Pokemon Go Ultimate" posed the biggest threat because it deliberately locks the screen of devices immediately after being installed. In many cases, restarting an infected phone isn't enough to unlock the screen. Infected phones can ultimately be unlocked either by removing the battery or by using the Android Device Manager. Once the screen has been unlocked and the device has restarted, the app -- which by now has the title PI Network --is removed from the device's app menu. Still, it continues to run in the background and surreptitiously clicks on ads in an attempt to generate revenue for its creators. Eset discovered two other fake Pokemon Go apps inhabiting Google Play, one named "Guide & Cheats for Pokemon Go" and the other "Install Pokemongo." Both deliver ads carrying fraudulent, scary-sounding messages that are designed to trick users into buying expensive, unnecessary services. One such message claims the device is infected with malware and prompts the user to spend money to get the malicious apps removed.
Re: (Score:2)
You just want to catch them ll for yourself. I bet you're a salty Mystic player!
Re: (Score:2)
It's dumb, shallow, and boring. It won't last.
That's what I said about Starbucks.
Re: (Score:2)
It's dumb, shallow, and boring. It won't last.
That's what I said about Starbucks.
So it tastes like burnt mud too?
Re: (Score:2)
Google drops the ball...again (Score:4, Interesting)
Android is a security disaster.
People pretend that only those that run rooted phones and install things from untrusted sources are at risk. Once again we are shown that it doesn't matter wethet you install from the play store or not. The Android ecosystem is just full of holes.
My question is when will Google be held liable for this trainwreck? There are specific requirements that have to be met to be able to submit an app to the play store. The apps are (supposedly) verified before being accepted. Google even reserves the right to ban certain types of apps from the store or to remotely remove them from users devices (fun fact: Google Play Services allows Google to remotely administer your device. And it runs as root, because, why not?).
We can't keep letting Google get away with this. We can't keep pretending that Google isn't liable.
Re: (Score:2)
and imagine how crowded it would be in just a couple decades without that control of population and of course doctors would have to sleep in beds instead of on piles of cash
Re: (Score:3)
The apps are (supposedly) verified before being accepted.
No, no doubt Google scans for existing threats when developers upload their apps, but Google makes no such promise about having verified apps on their store. You must be confusing Google with Apple.
We can't keep pretending that Google isn't liable.
Liable for what? What damage has been done? Booting into recovery mode is just one google search away. Also, Google can remotely uninstall malicious apps.
Not only that, but users can flag and downrate such apps immediately. The system is such that apps with low ratings lose visibility in their search results. And
Re: (Score:1)
No, no doubt Google scans for existing threats when developers upload their apps, but Google makes no such promise about having verified apps on their store. You must be confusing Google with Apple.
1. Google CANNOT be THAT incompetent. They simply aren't "scanning" squat.
2. Apple is smart enough to not GUARANTEE no Malware. But their track record undeniably points out that whatever they are doing as far as App Approval is FAR, FAR, FAR superior to what Google is doing.
Re: (Score:2)
Most recently was a radio app that even after recomplying with the store policy that Apl must gouge the user because reasons if there is payment made available in app. They removed the sign up / payment in app completely with no indication of external payment methods like Amazon does.
I assume you are referring to the recent Spotify App?
/. Comment [slashdot.org] sums up the real reason Spotify is wanting preferential treatment.
This
Re: (Score:2)
Trump will fix it
People have been saying this ia s crime, I'm certain . I'll make sure that Anonymous Cowards will be modded so high that theiy'll get tired of being so insightful. I'll build a Slashdot with the Cowards at the top, and make the moderators pay for it. Oh yeah, I can tell you that.
Re: (Score:1)
Android is a security disaster.
As an android user, I'm very aware of this. That's why I use my phone primarily as a phone and sometimes a GPS navigation device. If it were lost or stolen my banking and credit card information would not be compromised. The most sensitive information that would be exposed would be my contacts and a few text messages. There aren't even any interesting photos on it. I have an actual camera for that.
But a couple days ago I was kind of curious about this Pokemon Go thing and I almost installed it until I
Re: (Score:2)
Apple's app stores can be the same too. Once in a while, bad apps get published. :(
Re: (Score:2)
If you're dumb enough to download an app from a dodgy unverified publisher, or without reading reviews, sure, blaming Google is the sane response here. ISPs are also responsible for the content they provide access to, I presume?
Re: (Score:2)
I think it just points out that the idea of a central repository doesn't make sense with proprietary software. I basically trust the Debian repo (or OpenBSD ports, etc) because there's at least a chance that someone checked the software out to see if it's intended to work for the users instead of someone else.
With the bullshit repos from Google, Apple, etc you know they aren't auditing the software, due to one really simply fact: they can't audit it. Binaries are submitted, not source. So whatever "vetting
Build a better Mousetrap (Score:2)
And better mice will beat a path to your doorstep.
say what you will, iOS is more grandmother safe (Score:1)
Apple seems to do a MUCH better job of policing their app store than Google, which makes iPhones a far better bet for non-techies like my grandma (and yes she does have an iPhone). I know someone will come along and point out some obscure case of malware making it into Apple's store but for every one of those there are thousands that make it into the Android store. It's way, way lopsided.
Google needs to up their game. Badly.
Re: (Score:2)
Apple seems to do a MUCH better job of policing their app store than Google, which makes iPhones a far better bet for non-techies like my grandma (and yes she does have an iPhone). I know someone will come along and point out some obscure case of malware making it into Apple's store but for every one of those there are thousands that make it into the Android store. It's way, way lopsided.
Google needs to up their game. Badly.
You are only partially-right. You don't have to be a "non-techie" to appreciate the advantages of Apple's App Approval process and iOS Security Model. In fact, if you ARE technical, you can actually understand and appreciate how well considered, well designed, and well executed these things are by Apple.
But the simple fact is, Google considers Android just another one of their Data Mining Opportunities; so it devotes precious little resources to actually FIXING the GOOGOLPLEX of very serious problems with
Re: (Score:2)
You are only partially-right. You don't have to be a "non-techie" to appreciate the advantages of Apple's App Approval process and iOS Security Model. In fact, if you ARE technical, you can actually understand and appreciate how well considered, well designed, and well executed these things are by Apple.
Because some of us technically adroit people don't want our damn phones to be the center of our technical lives. I have an iPhone for the reasons you do, because I want my phone to just work.
Re: (Score:2)
I have an iPhone for the reasons you do, because I want my phone to just work.
Reclamation! Joy before the angels of God! The point is that it works.
Say it, Brother Sir.
Already gone (Score:3)
Re: (Score:2)
Not showing up in store when I search. Looks like the system is working to me.
Wrong!
If the "system" was working, these not one, not two, but THREE Malware-infested Apps would have NEVER BEEN APPROVED.
That is, unless you are talking about the "media damage control" "system". If so, you're absolutely right...
Re: (Score:2)
Macs 4 no one! Stupid ass, cocksucking Steve Jobs lover. Go fuck yourself. You have no interest in helping anyone here except Apple stockholders, you disgusting shill.
Sounds like some poor Linux Fanboi is mighty Butthurt to me...
Re: (Score:3)
Re: (Score:2)
It is working. The fact that there is more freedom in the google play store, and even freedom to sideload is to me a fair trade for occasional malware. The fact that normally it is gone quickly means it is working.
It's a fucking PHONE! Grow up.