Voyage Tech Blogs

Voyage Technology has been serving the Beaver Dam area since 1999, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Yes, Even Apps from Official App Stores Can Be Malicious

Yes, Even Apps from Official App Stores Can Be Malicious

McAfee recently released a list of 15 applications the company identified as “predatory loan apps” available for download from the Google Play Store. While steps have been taken to remove them from the platform, we can now discuss how mobile applications can be weaponized if a user is not careful.

Let’s start by discussing the current issue of SpyLoan apps.

How Can Malicious Apps Sneak Onto the Play Store?

SpyLoan apps—much like many shopping applications and websites around this time of year—aren’t overtly malicious in the same way that other app-based threats are. These apps commonly work as malware, taking up storage space and exfiltrating data. 

SpyLoan apps operate more insidiously. Instead of installing malicious software and infecting the device, these apps operate as phishing attacks.

These apps work as financial applications, offering highly accessible loans that result in debt and invasions of a user’s privacy. These behaviors are also malicious, but SpyLoan apps can slip past the app store’s checks using social engineering instead of coded threats. As a result, they appear on Google Play and take advantage of the platform’s inherent trust. This trend has been observed (and has grown) since 2023.

This Makes It Crucial to Only Install Trusted Apps

It just goes to show that threats can even slip past the protections that Google has defending its platforms.

This makes it critical to be extremely selective regarding the applications you install, only using trusted sources and installing well-known and reputable software titles—specifically, the legitimate versions.

Warning Signs of Malware on Mobile Devices

There are a few indications to keep an eye out for that your device may be infected.

On the Device Itself:

  • Slower operation
  • Virus alerts
  • Missing storage space
  • Inoperable antivirus software
  • An inoperable device

In the Device’s Browser:

  • Invasive pop-up ads and tabs
  • Your browser redirects to other pages or ads
  • Your homepage or default search change without your permission
  • Virus alerts
  • Unwanted installs

Mobile Apps Can Be Used Offensively in Many Ways

Historically, attackers have used mobile applications in various ways to deliver attacks to mobile devices. From putting up apps and pushing malicious code in an update to phishing, as we see here, you must exercise some judgment before installing any application.

Sign Up For Our Newsletter!

Mobile? Grab this Article!

Qr Code

Tag Cloud

Security Technology Tip of the Week Best Practices Business Computing Data Productivity Business Software Innovation Hackers Cloud Network Security User Tips Efficiency Hardware Internet IT Support Malware Privacy Google Email Computer Workplace Tips Phishing Hosted Solutions IT Services Users Collaboration Mobile Device Workplace Strategy Ransomware Small Business Quick Tips Microsoft Cybersecurity Passwords Communication Data Backup Backup Saving Money Smartphone Managed Service Android Business Management VoIP Smartphones Mobile Devices communications Upgrade Disaster Recovery Data Recovery Browser Social Media Managed IT Services Productivity Microsoft Office Windows Current Events Network Tech Term AI Remote Internet of Things Facebook Automation Artificial Intelligence Gadgets Cloud Computing Covid-19 Holiday Miscellaneous Server Managed Service Provider Remote Work Outsourced IT Information Training Employee/Employer Relationship Encryption Spam Compliance Windows 10 Office Government Data Management Business Continuity Virtualization Business Technology Wi-Fi Blockchain IT Support Windows 10 Bandwidth Apps Two-factor Authentication Data Security Mobile Office Vendor Apple App Employer-Employee Relationship Managed Services Voice over Internet Protocol Networking Mobile Device Management Chrome BYOD Gmail Budget WiFi Access Control Tip of the week Conferencing Computing Hacker Information Technology Avoiding Downtime How To BDR Marketing Office 365 HIPAA Applications Bring Your Own Device Health Big Data Help Desk Retail Operating System Healthcare Computers Managed IT Services Risk Management Website Analytics Office Tips Augmented Reality Router Storage Password Virtual Private Network Printer The Internet of Things Paperless Office Windows 11 Infrastructure 2FA Social Monitoring Excel Document Management Going Green Remote Workers Customer Service Cybercrime Telephone Scam Data loss Cooperation Free Resource Project Management Windows 7 Patch Management Save Money Microsoft 365 Remote Monitoring End of Support Vulnerability Vendor Management Solutions Firewall Physical Security Display Processor Computer Repair Mobile Security Mouse Holidays Administration Data Storage Smart Technology Supply Chain Video Conferencing Machine Learning Managed Services Provider Saving Time Virtual Machines Professional Services Customer Relationship Management Settings Wireless Managed IT Service Printing Content Filtering Maintenance Downloads Hacking Antivirus iPhone Presentation YouTube Licensing Cryptocurrency Entertainment Vulnerabilities Wireless Technology Data Privacy Images 101 Virtual Desktop LiFi Data storage Multi-Factor Authentication Robot Mobility Telephone System Cost Management Word Outlook Money IT Management Humor Meetings VPN Employees Integration Safety Modem Sports User Tip Education Database Surveillance Virtual Assistant Outsource IT Media Network Management Tech Support IT Technicians Virtual Machine Environment Proxy Server Reviews Cookies Monitors Cyber Monday Medical IT Mobile Computing Search Tactics Development Hotspot Transportation Small Businesses Websites Mirgation Hypervisor Displays Application Best Practice Shopping Nanotechnology Optimization PowerPoint Buisness IT solutions SharePoint Addiction Electronic Medical Records Language Employer/Employee Relationships Outsourcing IBM Legal Chatbots Navigation Business Growth Management PCI DSS Lenovo Gig Economy Screen Reader Writing Distributed Denial of Service Workplace Cortana Service Level Agreement Internet Service Provider Virtual Reality Computing Infrastructure Teamwork Hiring/Firing Private Cloud Identity Evernote Paperless Alt Codes Server Management Regulations Compliance Superfish Bookmark Identity Theft Smart Tech Memes Co-managed IT Competition Downtime Hosted Solution Download Net Neutrality Twitter Alerts SQL Server Technology Care Error History Business Communications Typing Financial Data Browsers Smartwatch Connectivity IT Social Engineering Break Fix Scams User Knowledge Upload Procurement Remote Computing Azure Hybrid Work Google Drive Cyber security Multi-Factor Security Tech Human Resources Social Network Telework 5G CES Tablet IoT Communitications Dark Web Cables Unified Communications Experience Trends Supply Chain Management Alert IP Address Google Docs File Sharing Regulations Dark Data Google Calendar Term Google Apps Bitcoin Running Cable Managed IT Customer Resource management FinTech Data Analysis Star Wars IT Assessment How To Microsoft Excel IT Maintenance Google Wallet Recovery Gamification Flexibility Notifications Staff Value Business Intelligence Travel Social Networking Legislation Shortcuts Hard Drives Windows 8 Laptop Organization Techology Fileless Malware Digital Security Cameras Google Maps Smart Devices Ransmoware Domains Drones Content Remote Working Wearable Technology Memory Vendors Unified Threat Management Motherboard Data Breach Comparison Google Play Be Proactive Refrigeration Halloween Health IT Unified Threat Management Directions Videos Assessment Electronic Health Records Permissions Workforce Public Speaking Wasting Time Threats Lithium-ion battery Trend Micro Network Congestion Specifications Security Cameras Workplace Strategies Hacks Entrepreneur Scary Stories Fun User Error Microchip Internet Exlporer Software as a Service Fraud Meta Deep Learning Username Managing Costs Amazon Point of Sale eCommerce Black Friday SSID Undo

Blog Archive