Mobil Tech and Malware news - post it here

[bob3160]

The Google Play Store isn't always safe — here's what you need to know
https://blog.avast.com/google-play-store-safety

https://youtu.be/koCa6MQZoRo

[Asyn]

Russian-linked Android malware records audio, tracks your location
https://www.bleepingcomputer.com/news/security/russian-linked-android-malware-records-audio-tracks-your-location/

[Asyn]

Android Security Bulletin — April 2022
https://source.android.com/security/bulletin/2022-04-01?hl=en

[Asyn]

Google boosts Android security with new set of dev policy changes
https://www.bleepingcomputer.com/news/security/google-boosts-android-security-with-new-set-of-dev-policy-changes/
https://android-developers.googleblog.com/2022/04/expanding-plays-target-level-api-requirements-to-strengthen-user-security.html

[Asyn]

Android apps with 45 million installs used data harvesting SDK
https://www.bleepingcomputer.com/news/security/android-apps-with-45-million-installs-used-data-harvesting-sdk/
http://blog.appcensus.io/2022/04/06/the-curious-case-of-coulus-coelib/

[Asyn]

Yandex is causing data privacy concerns for mobile users
https://blog.avast.com/yandex-and-data-privacy

[bob3160]

Yandex is causing data privacy concerns for mobile users
https://blog.avast.com/yandex-and-data-privacy

https://youtu.be/PsKogYyuFQ0

[Asyn]

Look out for Octo's tentacles! A new on-device fraud Android Banking Trojan with a rich legacy
https://threatfabric.com/blogs/octo-new-odf-banking-trojan.html

[Asyn]

Fakecalls: a talking Trojan
https://www.kaspersky.com/blog/fakecalls-banking-trojan/44072/

[Pondus]

Android banking stealer dubbed “Sharkbot” found disguised as legitimate anti-virus apps on the Google Play store

https://blog.checkpoint.com/2022/04/07/android-banking-stealer-dubbed-sharkbot-found-disguised-as-legitimate-anti-virus-apps-on-the-google-play-store/

[Asyn]

Your iOS app may still be covertly tracking you, despite what Apple says
https://arstechnica.com/information-technology/2022/04/a-year-after-apple-enforces-app-tracking-policy-covert-ios-tracking-remains/
https://arxiv.org/pdf/2204.03556.pdf

[Asyn]

Critical Chipset Bugs Open Millions of Android Devices to Remote Spying
https://thehackernews.com/2022/04/critical-chipset-bug-opens-millions-of.html
https://blog.checkpoint.com/2022/04/21/largest-mobile-chipset-manufacturers-used-vulnerable-audio-decoder-2-3-of-android-users-privacy-around-the-world-were-at-risk/

[Asyn]

Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code
https://krebsonsecurity.com/2022/04/leaked-chats-show-lapsus-stole-t-mobile-source-code/

[Asyn]

Google Play Store now forces apps to disclose what data is collected
https://www.bleepingcomputer.com/news/security/google-play-store-now-forces-apps-to-disclose-what-data-is-collected/

[bob3160]

Google Play Store now forces apps to disclose what data is collected
https://www.bleepingcomputer.com/news/security/google-play-store-now-forces-apps-to-disclose-what-data-is-collected/

The idea is a good one. Enforcement as usual is not so great.

July 20, 2022: New app submissions and app updates will be rejected in Play Console if there are unresolved issues with the form.
Old apps if they don't have that information ready can simple display
“No info available” in the Data safety section of the app.
I checked quite a few apps and found that "No info available" message.