Security News > 2020 > January > Threat From Pre-Installed Malware on Android Phones is Growing
Update] Pre-installed malware on Android phones is a growing menace - so much that on Wednesday this week, Privacy International and around 50 other international NGOs sent an open letter to Google demanding a stop to the habit.
The pre-installed malware comprises a Wireless Update app detected by Malwarebytes as Android/PUP.Riskware.
UMX. "From the moment you log into the mobile device," say the Malwarebytes researchers, "Wireless Update starts auto-installing apps. To repeat: There is no user consent collected to do so, no buttons to click to accept the installs, it just installs apps on its own." While it is possible to uninstall this app - which could potentially be used to secretly download malware - the user could miss out on critical operating system updates.
Secondly, pre-installed apps should be subject to the same Google scrutiny as is applied to Play Store apps.
"One of the biggest issues today," he commented, "Is that with system apps like the aforementioned Settings app, there is no solution. You should be able to easily update/replace system level malware with legitimate versions, even if generic, found on Google Play.".
News URL
Related news
- Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices (source)
- Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection (source)
- Android financial threats: What businesses need to know to protect themselves and their customers (source)
- New Crocodilus malware steals Android users’ crypto wallet keys (source)
- Counterfeit Android devices found preloaded With Triada malware (source)
- SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps (source)
- Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps Targeting Crypto Users (source)
- New Android malware steals your credit cards for NFC relay attacks (source)
- SuperCard X Android Malware Enables Contactless ATM and PoS Fraud via NFC Relay Attacks (source)
- Russian army targeted by new Android malware hidden in mapping app (source)