Antivirus

These free antivirus apps may cause more damage than actual viruses

Audio player loading… Downloading a free antivirus or cleaning app for your Android smartphone may put your privacy and security at greater risk than if you had avoided doing so altogether as many of these apps contain data trackers and even links to potentially malicious domains.To compile its new report, Cybernews studied the 40 highest-ranking…

Audio player loading…

Downloading a free antivirus or cleaning app for your Android smartphone may put your privacy and security at greater risk than if you had avoided doing so altogether as many of these apps contain data trackers and even links to potentially malicious domains.

To compile its new report, Cybernews studied the 40 highest-ranking and most downloaded cleaning and Android antivirus apps on the Google Play Store to find that many of these apps don’t live up to the high standards of similar software on desktop. Even worse, between them these apps have been installed more than 918m times and and the most popular ones have over 1m installs each.

Share your thoughts on Cybersecurity and get a free copy of the Hacker’s Manual 2022. Help us find how businesses are preparing for the post-Covid world and the implications of these activities on their cybersecurity plans. Enter your email at the end of this survey to get the bookazine, worth $10.99/£10.99.” data-widget-type=”deal” data-render-type=”editorial”>

Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2src22

Share your thoughts on Cybersecurity and get a free copy of the Hacker’s Manual 2022. Help us find how businesses are preparing for the post-Covid world and the implications of these activities on their cybersecurity plans. Enter your email at the end of this survey to get the bookazine, worth $10.99/£10.99.

Cybernews’ research team provided further insight on its findings and explained why users may be tempted to download these apps in a blog post, saying:

“Based on the total installation count, common Android users are eager to secure their phones from malware and interested in keeping their devices running as fast as possible by cleaning junk files and cache. Less tech-savvy users are likely to download an app to do all of this tedious work automatically. However, a lot of the free available options come at a hidden price – user data is being tracked, sold or plainly managed insecurely due to questionable coding and privacy practices of the application developers.”

Red flags galore

After doing a deep dive on each of the 40 apps in question, Cybernews then gave each a security score out of 100.

13 of the apps were judged to be so detrimental to privacy by the news outlet that they scored the lowest pos

Read More

Be the first to write a comment.

Leave a Reply

Your email address will not be published. Required fields are marked *

Antivirus

Why This Budget-Friendly VPN & Antivirus Combo Is Blowing Up

If you’re looking to score a two-in-one deal, this discounted VPN + antivirus combo from Surfshark is sure to catch your eye…

If you’re looking to score a two-in-one deal, this discounted VPN + antivirus combo from Surfshark is sure to catch your eye…
Read More

Continue Reading
Antivirus

Hackers are using Google.com to deliver malware by bypassing antivirus software. Here’s how to stay safe

Attackers use real Google URLs to sneak malware past antivirus and into your browser undetected This malware only activates during checkout, making it a silent threat to online payments The script opens a WebSocket connection for live control, completely invisible to the average user A new browser-based malware campaign has surfaced, demonstrating how attackers are


  • Attackers use real Google URLs to sneak malware past antivirus and into your browser undetected
  • This malware only activates during checkout, making it a silent threat to online payments
  • The script opens a WebSocket connection for live control, completely invisible to the average user

A new browser-based malware campaign has surfaced, demonstrating how attackers are now exploiting trusted domains like Google.com to bypass traditional antivirus defenses.

A report from security researchers at c/side, this method is subtle, conditionally triggered, and difficult for both users and conventional security software to detect.

It appears to originate from a legitimate OAuth-related URL, but covertly executes a malicious payload with full access to the user’s browser session.

You may like

  • Google Apps Script abused to launch dangerous phishing attacks
  • Criminals hijacking subdomains of popular websites such as Bose or Panasonic to infect victims with malware: here’s how to stay safe
  • Cybercriminals have found a sneaky way of stealing tax accounts and even encrypted messages: here’s what you need to know

Malware hidden in plain sight

The attack begins with a script embedded in a compromised Magento-based ecommerce site which references a seemingly harmless Google OAuth logout URL: https://accounts.google.com/o/oauth2/revoke.

However, this URL includes a manipulated callback parameter, which decodes and runs an obfuscated JavaScript payload using eval(atob(…)).

The use of Google’s domain is central to the deception – because the script loads from a trusted source, most content security policies (CSPs) and DNS filters allow it through without question.

This script only activates under specific conditions. If the browser appears automated or the URL includes the word “checkout,” it silently opens a WebSocket connection to a malicious server. This means it can tailor malicious behavior to user actions.

Read More

Continue Reading
Antivirus

Hackers Aren’t Just After Your Devices

Antivirus isn’t enough—hackers are after doors they can open…

Antivirus isn’t enough—hackers are after doors they can open…
Read More

Continue Reading
Antivirus

Police takes down AVCheck site used by cybercriminals to scan malware

An international law enforcement operation has taken down AVCheck, a service used by cybercriminals to test whether their malware is detected by commercial antivirus software before deploying it in the wild. …

An international law enforcement operation has taken down AVCheck, a service used by cybercriminals to test whether their malware is detected by commercial antivirus software before deploying it in the wild. …
Read More

Continue Reading