Friday, June 2, 2023

A simple and handy Android app was periodically recording users without their knowledge

Google will soon improve the recording screening function so that you can select one app and thus avoid notifications. Experience that will prevent other applications such as iRecorder Screen Recorder from being used, one that from one day to the next has become a Trojan Horse, completely modifying its behavior.

This app was launched in September 2021 with the aim of allowing anyone to record their mobile screen. A simple operation according to its description in the Google Play Store, so that it did not give any sign of change that it would have been updated in August.

In this new version, it has started to record one minute of audio every 15 minutes and report those files via an encrypted connection to the developer’s server.

An app turned into a Trojan

This near-fatal experience was picked up by a post from Essential Security in which researcher Lucas Stefanko provides details of its malicious behavior based on the open-source AhMyth Android RAT (Ancient Access Trojan) code.

Once in that update, it was added to iRecorder-users to record using mobile phones. The code downloaded by AhMyth has been almost completely changed, a sign of how development has begun to transform the behavior of this app.

At that time the app already had 50,000 downloads and was removed from the Play Store. Stefanko added that files embedded with the AhMyth protocol have already passed Google’s filters that try to block apps of this type.

This type of event is not something new in story applications or in the same App Store. Both stores have enough measures to block most of them, but there is always some skilled developer who can put a pig in a pot, as one might say.

Function screen in memory Android 14 9to5Google Free Android

Stefanko, according to Ars Technica, puts on the table a very serious problem that is happening more and more in these digital media: apps that seem innocent in the first versions to become in some update malicious seeking to receive in any way with the user’s data, or simply malicious code in the terminals in inject other uses.

In this case, this app is no longer available in the Google Play Store, but surely many others will follow the path so that the user has some app on his mobile that can sometimes be transformed into a monster that lives in your design.

Nation World News Desk
Nation World News Desk
Nation World News is the fastest emerging news website covering all the latest news, world’s top stories, science news entertainment sports cricket’s latest discoveries, new technology gadgets, politics news, and more.
Latest news
Related news


Please enter your comment!
Please enter your name here