Spyware-laden 'privacy' extensions and apps affect over 11 million users

Researchers have discovered a collection of privacy-related apps and browser extensions that track users' activity and send it to a remote server. The suspicious software has over 11 million users in total, and include extensions for Chrome and Firefox, as well as mobile apps for iOS and Android.

According to Andrey Meshkov of AdGuard, the extensions all appear to belong to one company: Big Star Labs. This isn't immediately obvious because many of the apps are published under different names, and their privacy policies are only available as image files, which means the text can't be indexed by Google. AdGuard was only able to find the connections by trawling through the policies manually.

Meshkov found issues with the following tools (some of which have now been removed from the respective app stores):

  • Block Site
  • AdblockPrime
  • Mobile Health Club apps
  • Poper Blocker
  • CrxMouse

Read the fine print

The mobile apps are particularly concerning. All of the Android apps request access to the operating system's Accessibility Services, which allows apps to perform tasks that would usually require user interaction, such as tapping and swiping (something Google tried to crack down on last year).

Meanwhile, one iOS app offers to install a Mobile Device Management profile, which allows it to see all the apps installed on your phone, see your browser history, and potentially even install new apps.

"It is no 'new' news that our personal data is valuable," Meshkov concludes. "Those who want to profit from acquiring it will always surround us. With this in mind, I will never tire of repeating two simple rules one needs to follow if they care about preserving their privacy and security: Read the privacy policy before installing anything [and] never install anything made by a developer you don't trust."



TechRadar - Software news

5 comments:

  1. Very good ideas and this was very useful for my professional oriented. Thanks for you provides a great post and I expect to you more information. Your written style is very impressed to me and I'm waiting for your updates...
    Spoken English Classes in Chennai
    Best Spoken English Classes in Chennai
    Html5 Training in Chennai
    IELTS Coaching in Chennai
    Pega Training in Chennai
    Japanese Classes in Chennai
    TOEFL Coaching in Chennai
    Spoken English Classes in Porur
    Spoken English Classes in Anna Nagar

    ReplyDelete
  2. In this blog is very interesting, Truely you provide the information is well said and the explanation way is very clearly to easily understanding for readers. Keep continuously the good work and I am waiting for your valuable details.
    Corporate Training in Chennai
    Corporate Training institute in Chennai
    Embedded System Course Chennai
    Unix Training in Chennai
    Excel Training in Chennai
    Tableau Training in Chennai
    Corporate Training in Chennai
    Corporate Training institute in Chennai

    ReplyDelete