Google banned a popular application from its Google Play Store, and recommended that Android users delete it immediately from their devices, according to several reports.
A report by the British Express website said that experts discovered that the application was able to record conversations, steal messages, and even track where users were heading during the day without their permission.
The app, called iRecorder - Screen Recorder, is believed to have been downloaded around 50,000 times before it was removed, meaning many people could be affected.
And the technical website "Techcrunch" stated that the security team at ESET, which specializes in information security, found that the application was able to install the malware called "AhMyth RAT" on the devices.
According to ECET experts, when the app was first uploaded to the Google Play store in 2021, it was clean and malware was added to it at a later time.
Experts explained that Android users who installed a previous version of “iRecorder” (before version 1.3.8) may unintentionally expose their devices to malware if they later update the application either manually or automatically, even without giving any further approvals to the application. To access some services on the phone.
Google deletes a popular application that spies on Android users
Ah MythRat is an innovative method by hackers that enables them to "convert an initially safe application into a malicious application, even after several months, by spying on users and threatening their privacy," according to the "e-Set" website .
Bangkok, Thailand. November 2, 2018 - google play store application close up on smartphone screen.
Google removed the application from the online store as soon as it was notified by the "e-set" team (Shutterstock)
And if you have installed the software now, now is the time to check and delete your device. And the longer you have the app on your phone, the greater the chance that you will become its next victim.
It is noteworthy that Ah MythRat is able to steal a wide range of data from infected devices, including: contacts, SMS messages, call logs, browser history, device location, and device screenshots.
The attacker can also remotely take control of the infected device using malware, allowing it to perform actions such as making calls, sending text messages and surfing the Internet.
The ECET team revealed that the application was removed from the Google Play Store after it was informed of the damage caused by the latest version of the application.
How to delete the application
- The application can be deleted by following these steps:
- Open the Google Play Store app.
- In the upper right, click on the profile icon.
- Click on Manage apps and devices.
- Click on the name of the application that you want to delete.
- - Click on Uninstall.