Another malicious app found wreaking havoc on Android Platform

The Android universe is constantly being targeted for attacks with malicious apps. Google guarantees the protection of your system but has points where it is possible to circumvent security.

A new source of problems has been discovered and it all comes down to an app again. This bypassed Google's rating and has been exploring users for some time. This is yet another app that must be immediately removed from the smartphone.

A new threat to Android

Despite all the security that Google has brought to Android and the Play Store, attackers have increased their malicious actions. More and more apps are found with malware and ransomware that try to take advantage of user data.

A new attack was recently discovered by Pradeo and focuses on a single app. Called Daily Food Diary, it was based on capturing food images and scheduling reminders. Its success has been great, with more than 10,000 downloads.

A simple app compromises the Play Store

From what was revealed, the app managed to bypass Play Protect verification in a very creative way. Hid the malicious code in an encrypted file in a folder called 0OO00l111l1l. It was able to detect whether it was running on an emulator, and so it wouldn't run the malicious code so it wouldn't be discovered.

Another discovery that was made reveals that this app is associated with the Joker malware. This has been present in the Play Store several times, with more than 1700 apps, which meanwhile have already been removed from the Android app store. The Daily Food Diary has also been removed.

Easily brought problems to the smartphone

This app asked for strange permissions for such an app. The first was to run in the background and start at an Android startup. This allowed data collection to be permanent. He constantly asked for access to contacts and call management, rejecting them to prevent them from being interrupted.

Naturally, the Daily Food Diary app must be removed immediately if installed. Google has already tried to remove it from the Play Store, but users who still have it should do the manual removal.