The Pradeo Lab identifies another app with Joker malware on Google Play

Posted by The Pradeo Lab on October 22, 2019

Update: The app “Int App Lock” has now been deleted from Google Play and added to global antiviral databases.


Joker is a malware that silently exfiltrates data and subscribes users to unwanted premium subscription. In September, the malware was found in 24 apps on Google Play. Last week, Pradeo researchers identified another infected application still featured on Google Play. The app called Int App Lock, a tool intended to lock access to some data with a PIN code, was installed on 10,000+ devices. Users are advised to immediately delete it from their device.

 

Read More

Pradeo streamlines Mobile Threat Intelligence with a brand-new line of services for security professionals

Posted by Roxane Suau on July 10, 2019

Official Press Release here.

Pradeo’s new mobile threat intelligence services provide deep and accurate insights on mobile threats, offering companies visibility on the mobile environment, thus enabling effective counter-threat responses.

Read More

Google Play’s most downloaded shopping apps irresponsibly process users’ data

Posted by The Pradeo Lab on July 03, 2019

The largest online retailers in the world offer their products through mobile applications that are used by billions of customers. As a result, nowadays 82% of internet users shop online through their mobile device, according to a Statista report.

When a mobile application handles personal and financial data, it is required by data privacy laws, such as the General Data Protection Regulation (GDPR) and the Payment Service Directive 2 (PSD2), to embed security capabilities that’ll enforce privacy by design and prevent data breach.

The Pradeo Lab looked into Google Play’s 38 most downloaded shopping apps, shredding them with its app security testing tool. The results show they overly process personal data and handle them in a poorly secure manner.

 

 

Read More

Are These Malicious Google Play Applications Still On Your Smartphone? | Updated June 2019

Posted by Roxane Suau on June 13, 2019

When Google and Apple remove malicious or leaky applications from their stores, people who have them on their smartphone are not notified of their dangerous behaviors. Therefore, millions of users keep them on their devices, exposing all the data they manipulate to identified threats.

 

Read More

Google Play app "Peel Smart Remote" leaks users' pictures

Posted by The Pradeo Lab on June 07, 2019

Updated on June 7th: Following the announcement of these discoveries, the "Peel Smart Remote" mobile application was removed from Google Play.

 

The Peel Smart Remote app is a widely used Google Play application (100M+ installs) that has often made the news because of its highly intrusive behaviors, such as full screen overlays and untimely advertising, causing poor user experience.

Last week, the Pradeo Security engine alerted its users about severe security issues discovered in the app’s 10.7.3.3 version. It has been found that the application collects and leaks users’ pictures to a server that does not belong to the app publisher. Last Friday, the application was updated on the Google Play store (now version 10.7.4.2), the leaky behavior has been removed from the code but yet no communication was made by the company on this matter. Because applications’ update is not automatic on all Android devices, millions of users running the former version of the app are still currently exposed.

 

 

Read More