ARTICOLO IN LINGUA INGLESE
Quote: Aviran Hazum, Manager of Mobile Intelligence at Check Point Software
“The malware’s technique is fairly new and innovative. The technique here is to hijack the connection to WhatsApp by capturing notifications, along with the ability to take predefined actions, like ‘dismiss’ or ‘reply’ via the Notification Manager. The fact that the malware was able to be disguised so easily and ultimately bypass Play Store’s protections raises some serious red flags. Although we stopped one campaign of the malware, the malware family is likely here to stay. The malware may return hidden in a different app.
Play Store’s protections can only go so far. Phone users need a mobile security solution. Luckily, we detected the malware early, and we quickly disclosed it to Google – who also acted quickly. Users should be wary of download links or attachments that they receive via WhatsApp or other messaging apps, even when they appear to come from trusted contacts or messaging groups. If you think you’re a victim, I would immediately remove the application from my device, and proceed to change all my passwords.”
Security Tips for Android Users
- Install a security solution on your device
- Download applications only from official markets
- Keep your device and apps up to date
Figure 1. “FlixOnline” Application on Google Play
Figure 2. “FlixOnline” Permissions Request
