"Bottom line, just because you can get the latest software on your device does not mean that you should," the security researchers write. A more thorough option is to compare the app's SHA-1 hash, a long string of characters used to verify whether a file was modified by a malicious third-party, to make sure it matches the hash of the legitimate version. The infected version is granted more system permissions, so one method is to compare the permissions of your app to those of the legitimate one. Luckily, there are several ways to check if you've downloaded the malicious app. "Should an individual download an APK from a third party that has been infected with a backdoor, such as the one we discovered, their device would then be compromised." "Unfortunately, this is an extremely risky practice and can easily lead users to installing malicious apps on their own mobile devices," Proofpoint wrote in a blog reporting the malicious Pokemon app. Proofpoint notes that several major news outlets have even provided instructions on how to find and install the app from a third-party.
This is potentially a huge deal, since the game's slow roll-out to different regions has led some impatient players to download the app from third-party websites instead of waiting for the official release on Android's Play store, which requires side-loading to install. To install it, a user needs to "side-load" the malicious app by disabling an Android security setting that normally prevents the installation of unverified third-party apps from "unknown sources." The malicious app was uploaded to an online malware detection repository on July 7, less than 72 hours after Nintendo released the game in Australia and New Zealand. The security firm Proofpoint discovered the malicious application, or APK, which was infected with DroidJack, a remote access tool (RAT) that compromises Android devices by silently opening a backdoor for hackers.
0 kommentar(er)
