Here we go again: Software nasties slip into Google Play, exploit make-me-root Android flaw for maximum pwnage

Apps spotted abusing use-after-free() bug seven months before patch

At least three malicious apps with device-hijacking exploits have made it onto the Google Play Store in recent weeks.

This is according to eggheads at Trend Micro, who found that the since-removed applications were all abusing a use-after-free() flaw in the operating system to elevate their privileges, and pull down and run further malware from a command-and-control server. The malicious apps were Camero, FileCrypt, and callCam, so check if you still have them installed.

"The three malicious apps were disguised as photography and file manager tools," said Trend researchers Ecular Xu and Joseph Chen on Monday.

"We speculate that these apps have been active since March 2019 based on the certificate information on one of the apps."

< ..

Support the originator by clicking the read the rest link below.