Security News > 2020 > January > Threat From Pre-Installed Malware on Android Phones is Growing

Update] Pre-installed malware on Android phones is a growing menace - so much that on Wednesday this week, Privacy International and around 50 other international NGOs sent an open letter to Google demanding a stop to the habit.
The pre-installed malware comprises a Wireless Update app detected by Malwarebytes as Android/PUP.Riskware.
UMX. "From the moment you log into the mobile device," say the Malwarebytes researchers, "Wireless Update starts auto-installing apps. To repeat: There is no user consent collected to do so, no buttons to click to accept the installs, it just installs apps on its own." While it is possible to uninstall this app - which could potentially be used to secretly download malware - the user could miss out on critical operating system updates.
Secondly, pre-installed apps should be subject to the same Google scrutiny as is applied to Play Store apps.
"One of the biggest issues today," he commented, "Is that with system apps like the aforementioned Settings app, there is no solution. You should be able to easily update/replace system level malware with legitimate versions, even if generic, found on Google Play.".
News URL
Related news
- New FireScam Android malware poses as RuStore app to steal data (source)
- New FireScam Android data-theft malware poses as Telegram Premium app (source)
- FireScam Android Malware Poses as Telegram Premium to Steal Data and Control Devices (source)
- Top 5 Malware Threats to Prepare Against in 2025 (source)
- DoNot Team Linked to New Tanzeem Android Malware Targeting Intelligence Collection (source)
- Crypto-stealing iOS, Android malware found on App Store, Google Play (source)
- SpyLend Android malware downloaded 100,000 times from Google Play (source)
- Vo1d malware botnet grows to 1.6 million Android TVs worldwide (source)
- Serbian police used Cellebrite zero-day hack to unlock Android phones (source)
- Amnesty Finds Cellebrite’s Zero-Day Used to Unlock Serbian Activist’s Android Phone (source)