Mobil Tech and Malware news - post it here

[Asyn]

How we fought bad apps and developers in 2021
https://security.googleblog.com/2022/04/how-we-fought-bad-apps-and-developers.html

[DavidR]

How we fought bad apps and developers in 2021
https://security.googleblog.com/2022/04/how-we-fought-bad-apps-and-developers.html

I haven't read this (yet), but I have seen other reports that aren't so good for google.

Strange how there are still many bad apps being detected in 2022 ?

Still work to be done when apps are being submitted so they don't get on there in the first place.

EDIT: Just read it and it sounds more like a Google Pixel promotion.

[bob3160]

How we fought bad apps and developers in 2021
https://security.googleblog.com/2022/04/how-we-fought-bad-apps-and-developers.html

I haven't read this (yet), but I have seen other reports that aren't so good for google.

Strange how there are still many bad apps being detected in 2022 ?

Still work to be done when apps are being submitted so they don't get on there in the first place.

EDIT: Just read it and it sounds more like a Google Pixel promotion.

Since Pixel is the Google Phone, I had expected special consideration.
I own both a Pixel 5 and 6.

[Asyn]

Google Play Store now forces apps to disclose what data is collected
https://www.bleepingcomputer.com/news/security/google-play-store-now-forces-apps-to-disclose-what-data-is-collected/

The idea is a good one. Enforcement as usual is not so great.

July 20, 2022: New app submissions and app updates will be rejected in Play Console if there are unresolved issues with the form.
Old apps if they don't have that information ready can simple display
“No info available” in the Data safety section of the app.
I checked quite a few apps and found that "No info available" message.

https://blog.avast.com/privacy-google-play-store

[Asyn]

Android Security Bulletin — May 2022
https://source.android.com/security/bulletin/2022-05-01?hl=en

[Asyn]

Google Play now blocks paid app downloads, updates in Russia
https://www.bleepingcomputer.com/news/google/google-play-now-blocks-paid-app-downloads-updates-in-russia/

[Asyn]

App permissions and how to protect yourself
https://blog.avast.com/en/secure-browser/app-permissions-and-how-to-protect-yourself

[Asyn]

How your location is being tracked — and what to do about it
https://blog.avast.com/en/secure-browser/how-your-location-is-being-tracked-and-what-to-do-about-it

[Asyn]

FluBot Android malware targets Finland in new SMS campaigns
https://www.bleepingcomputer.com/news/security/flubot-android-malware-targets-finland-in-new-sms-campaigns/

[Asyn]

Mobile subscription Trojans and their little tricks
https://securelist.com/mobile-subscription-trojans-and-their-tricks/106412/

[Asyn]

Nearly one-third of App Store and Play Store apps may get removed
https://www.neowin.net/news/nearly-one-third-of-apple-and-google-apps-may-get-removed/

[DavidR]

Nearly one-third of App Store and Play Store apps may get removed
https://www.neowin.net/news/nearly-one-third-of-apple-and-google-apps-may-get-removed/

I actually think this isn't a bad thing, apps that haven't been updated in years, could well be vulnerable, not fully compatible with latest Android/iOS versions.

So I don't feel it is just a privacy/compliance issue.

[Asyn]

Just because your iPhone is powered off doesn’t mean it can’t be attacked
https://blog.avast.com/iphone-low-power-mode-hack
https://arxiv.org/pdf/2205.06114.pdf

[DavidR]

Just because your iPhone is powered off doesn’t mean it can’t be attacked
https://blog.avast.com/iphone-low-power-mode-hack
<snip>

Both interesting and disappointing, as in, are other phones, such as Android vulnerable as they too have the find my phone function/app.  Many people never actually switch off their phone or have it set to Low Power Mode.  I think I feel another article coming

[Asyn]

Canada bans Huawei and ZTE from 5G networks over security concerns
https://www.bleepingcomputer.com/news/security/canada-bans-huawei-and-zte-from-5g-networks-over-security-concerns/