VietNamNet Bridge - Experts have warned about the existence of some mobile apps forging Pokemon Go that attack mobile phones and cause users to lose money and data.

By installing apps and games containing malware and displaying ads on users’ smartphones underhand from afar, hackers can hijack devices to appropriate users’ money and data.

According to Trend Micro, Godless, the newly discovered software, has broken into more than 850,000 Android-based mobile devices throughout the world, mostly ones running on Android 5.1 Lollipop.

India has been the biggest sufferer with 46.19 percent of devices attacked, while Vietnam has had 2 percent. 

Godless is hidden in one or more applications on Google Play. The software can go deeply into devices, create admin access and automatically install other spyware without the users knowing it.

Pokemon Go, the game that has become feverish all over the world, still is not officially available in Vietnam, but Vietnamese gamers still can download it from many different sources. 

Experts have warned about the existence of some mobile apps forging Pokemon Go that attack mobile phones and cause users to lose money and data.

Analyzing counterfeit apps, BKAV, the Vietnam’s leading network security solution provider, said there is a type of malware – DroidJack – which can completely control Android devices. 

The malware can automatically install any apps as demanded by hackers on victims’ phones, turn on camera and micro to film, record all the calls messages and send the stolen information to hackers.

Ta Duc Thien, an expert from BKAV, found the way hackers insert malware into counterfeit apps.

“Hackers just need to download the file to install Pokemon Go provided by the manufacturer, then insert malware into the source code file of the software. After that, the software injected with malware will be posted on internet in the name exactly the same as the original software.

Since it can run well after it is downloaded into users’ mobile phones, phone users will not know that they have become victims and that their phones can be controlled from afar.

Therefore, BKAV has recommended not to download and use the Pokemon Go app with no clear origin. Users have been advised to use the official app store to be available when the manufacturer distributes Pokemon officially in Vietnam.

Ngo Tran Vu, director of Nam Truong Son Security, commented that the malicious codes attacking mobile phones are the most advanced ones. Most of the malware on mobile phones discovered so far can steal information while there is no need to damage phones like the previous-generation malware on personal computers or laptops.

Kaspersky Lab Vietnam’s experts have advised users to follow necessary steps to protect themselves from attacks. They said it is necessary to keep software on Android updated regularly by setting automatic updating. Every time when downloading apps and games, users need to check if the developers are certified by Google.


Zing