One of the best parts of owning an Android phone is being able to access millions of additional apps that aren’t found on Google’s main Play Store. There are swathes of third-party platforms which give users more freedom and choice, but if you ever download from one popular provider, you might want to check your phone without delay.
The security team at McAfee says it has recently discovered a nasty application hiding on Amazon’s Android Appstore service that, if installed, can start recording your screen, steal passwords and even read private SMS texts.
What makes this attack worse is that the application looks incredibly harmless with it claiming that it simply offered a way for users to track their Body Mass Index (BMI).
“Recently, we uncovered a seemingly harmless app called “BMI CalculationVsn” on the Amazon App Store, which is secretly stealing the package name of installed apps and incoming SMS messages under the guise of a simple health tool,” McAfee explained in a blog.
After being told about the harmful app, Amazon immediately deleted it from its servers but anyone who has downloaded it must make sure it’s also removed from their device.
“McAfee reported the discovered app to Amazon, which took prompt action, and the app is no longer available on Amazon Appstore,” McAfee added.
“As cybercrime continues to evolve, it is crucial to remain vigilant in protecting our digital lives. Apps like “BMI CalculationVsn” serve as a stark reminder that even the simplest tools can harbour hidden threats. By staying alert and adopting robust security measures, we can safeguard our privacy and data.”
Along with issuing this new warning, McAfee has also released some important advice to help Android users stay safe.
The secrity experts say that all Android users should think about installing reliable antivirus software on their devices and always beware when downloading new apps.
It’s a good idea to review permission requests and carefully examine what the app wants to access.
For instance, a BMI calculator has no legitimate reason to request access to SMS or screen recording.
One final tip is to watch for unusual app behaviour, such as reduced device performance, rapid battery drain, or a spike in data usage, which could indicate malicious activity running in the background.
