'Evil Telegram' Android apps on Google Play infected 60K with spyware

[Gandalf_The_Grey]

Content source

https://www.bleepingcomputer.com/news/security/evil-telegram-android-apps-on-google-play-infected-60k-with-spyware/

Several malicious Telegram clones for Android on Google Play were installed over 60,000 times, infecting people with spyware that steals user messages, contacts lists, and other data.

The apps appear to be tailored for Chinese-speaking users and the Uighur ethnic minority, suggesting possible ties to the well-documented state monitoring and repression mechanisms.

The apps were discovered by Kaspersky, who reported them to Google. However, at the time the researchers published their report, several malicious apps were still available for download through Google Play.

Dangers of modded messaging apps

Late last month, ESET warned about two trojanized messaging apps, Signal Plus Messenger and FlyGram, promoted as more feature-rich versions of the popular open-source Signal and Telegram apps.

Now removed from Google Play and the Samsung Galaxy Store, those apps contained the BadBazaar malware that allowed their operators, the Chinese APT 'GREF,' to spy on their targets.

Earlier this year, ESET discovered two dozen Telegram and WhatsApp clone sites distributing trojanized versions of the popular messaging apps, also targeting Chinese-speaking users.

Users are recommended to use the genuine versions of messaging apps and avoid downloading forked apps that promise enhanced privacy, speed, or other features.

Google has been unable to stop these malicious uploads mainly because the publishers introduce malicious code via post-screening and post-installation updates.

In July, the tech giant unveiled a strategy to implement a business verification system on the Google Play store starting on August 31st, 2023, aiming to enhance security for Android users.

'Evil Telegram' Android apps on Google Play infected 60K with spyware

Several malicious Telegram clones for Android on Google Play were installed over 60,000 times, infecting people with spyware that steals user messages, contacts lists, and other data.

www.bleepingcomputer.com

 

[Andro_ID]

So Telegram and Whatsapp app should keep away from our phones?

 

[Gandalf_The_Grey]

From that article:

Users are recommended to use the genuine versions of messaging apps and avoid downloading forked apps that promise enhanced privacy, speed, or other features.

 

[TairikuOkami]

So Telegram and Whatsapp app should keep away from our phones?

I use the original Telegram from Telegram, it is less censored than the Google version anyway.

 

[trott3r]

I use the original Telegram from Telegram, it is less censored than the Google version anyway.

In what way is the google vesrion censored?

Is that a version from telegrams website?
or f-droid
I do remember a FOSS version of telegram which caused problems with video chat for me in
the past.
thanks

 

[TairikuOkami]

In what way is the google vesrion censored?

You can not find nor connect to some channels as per Google's TOS. Basically speaking, Google is eavesdropping on it's apps.

Is that a version from telegrams website?

Yes, as the untrusted source.