You’d think an app listed on the Play Store would be safe to download. That’s what Google wants you to believe, and it’s true to a large extent. But in this digital world, no service is foolproof. 

Time and time again, there have been instances when widely downloaded apps on the Play Store were infected by malware. While Google continues to promise that the app market is safe, another incident has come to light. 

Security researchers have discovered a new Trojan malware called Necro that not only infects apps downloaded through unofficial sources but also those on the Play Store, including one with more than 10 million downloads.

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

A man scrolling on his Android phone  (Kurt “CyberGuy” Knutsson)

How does Necro infect apps

The exact method by which both apps were initially compromised with the malware is still unclear. Researchers at Kaspersky’s Securelist believe a rogue software development kit (SDK) used for integrating advertising functionalities may be responsible for the breach. SDKs are essential tools developers use to add specific features to their apps, such as ad services, analytics or payment processing. 

CLICK HERE FOR MORE U.S. NEWS

When an SDK is compromised, it can inadvertently introduce vulnerabilities into the applications that utilize it. In this case, the malware affecting the apps displayed ads in the background to generate fraudulent revenue for the attackers, installed apps and APKs without the user’s consent and used invisible WebViews to interact with paid services.

The Trojan in question, Necro, isn’t exactly new. It’s the same malware that infected a popular document scanner called CamScanner in 2019, which at that time had over 100 million downloads.

An Android phone on a desk  (Kurt “CyberGuy” Knutsson)

ANDROID BANKING TROJAN EVOLVES TO EVADE DETECTION AND STRIKE GLOBALLY

Which apps are affected?

Kaspersky researchers identified several apps affected by the Necro Trojan, including those available in Google Play. Their combined audience numbered more than 11 million Android devices.

The first affected app is the Wuta Camera, a photo editing and beautification tool. It has at least 10 million times. The Necro loader has been embedded in it starting from version 6.3.2.148. The latest version of the app, 6.3.6.148, which was available on Google Play, also had it. After the researchers reported the presence of malicious code to Google, the Trojan was removed from the app in version 6.3.7.138.

The second infected app was Max Browser. This browser, according to Google Play, has been installed more than a million times and, starting with version 1.2.0, also contained the Necro loader. Google took down the infected app from the Play Store after it was reported.

Kaspersky also found WhatsApp mods that had the Necro loader in unofficial sources. It also spotted the Spotify mod called “Spotify Plus,” which promises free access to ad-free premium services. Plus, the report mentions mods for popular games like Minecraft, Stumble Guys, Car Parking Multiplayer, and Melon Sandbox, all of which were infected with the Necro loader.

Mods, or modifications, are altered versions of original apps or games that often provide additional features or tweaks.

GET FOX BUSINESS ON THE GO BY CLICKING HERE

An Android phone  (Kurt “CyberGuy” Knutsson)

ANDROID BANKING TROJAN MASQUERADES AS GOOGLE PLAY TO STEAL YOUR DATA

What is Google’s response to this?

Google is aware of the Necro malware and, as I mentioned above, it has already taken down the affected apps. A Google spokesperson provided us with the following statement:

“All of the malicious versions of the apps identified by this report were removed from Google Play prior to report publication. Android users are automatically protected against known versions of this malware by Google Play Protect, which is on by default on Android devices with Google Play Services. Google Play Protect can warn users or block apps known to exhibit malicious behavior, even when those apps come from sources outside of Play.”

THE HIDDEN COSTS OF FREE APPS: YOUR PERSONAL INFORMATION 

4 ways to protect yourself from Necro malware

1. Have strong antivirus software: Android has its own built-in malware protection called Play Protect, but the Necro Trojan proves it’s not enough. Historically, Play Protect hasn’t been 100% foolproof at removing all known malware from Android phones. The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.

2. Download apps from reliable sources: It’s important to download apps only from trusted sources like the Google Play Store. You might say I am contradicting myself, but Play Store is still safer than other options out there. It has strict checks to prevent malware and other harmful software. However, even with the security measures provided by Google Play, downloading apps from the store does not guarantee 100% protection against malware or harmful software. Avoid downloading apps from unknown websites or unofficial stores because they can pose a higher risk to your personal data and device. Never trust download links that you get through SMS.

3. Be cautious with app permissions: Always review the permissions requested by apps before installation. If an app requests access to features that seem unnecessary for its function, it could be a sign of malicious intent. Do not give any app accessibility permissions unless you really need to. Avoid granting permissions that could compromise your personal data.

4. Regularly update your device’s operating system and apps: Keeping your software up to date is crucial because updates often include security patches for newly discovered vulnerabilities that could be exploited by trojans.

ANDROID USERS AT RISK AS BANKING TROJAN TARGETS MORE APPS

Kurt’s key takeaways

The discovery of the Necro loader in apps like Wuta Camera, Max Browser and popular game mods shows just how serious security issues can be in the app world. With over 11 million Android devices affected, it’s crucial to be careful about where you download your apps. Unofficial sources can be a breeding ground for hidden threats, but the Play Store isn’t completely safe either. Google should look into what apps it allows on its platform. I haven’t seen as many malware issues affecting iPhone apps as there are on Android.

CLICK HERE TO GET THE FOX NEWS APP

Do you think Google does enough to protect users from malware on the Play Store? Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover

Follow Kurt on his social channels

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2024 CyberGuy.com.  All rights reserved.

Ever wonder how cruise lines keep up with the insatiable demand for bigger and better ships? 

It turns out they have a trick up their sleeve that’s almost as impressive as building a new vessel from scratch. 

Let’s dive into the fascinating world of cruise ship “jumboization.”

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

A Cruise ship split in half  (Windstar Cruises)

The cruise boom: More passengers, bigger ships

Cruise vacations have exploded in popularity over the past few decades. In 1990, about 3.7 million people took a cruise, but fast-forward to 2024, and we’re looking at a whopping 30 million cruisegoers. That’s a lot of buffet lines.

To keep up with this soaring demand, cruise lines have been building massive ships like Royal Caribbean’s Icon of the Seas. This floating city can carry nearly 10,000 people and boasts features like a waterpark, seven pools and 20 decks of entertainment. However, these mega-ships come with a hefty $2 billion price tag and take years to build.

Cruise ship split in half  (Windstar Cruises)

BEST TRAVEL GEAR FOR 2024 

Jumboization: The quick and (relatively) cheap solution

That’s where “jumboization,” a surgical procedure for ships almost as wild as it sounds, comes in. For about $80 million and just a couple of months out of service, cruise lines can literally slice an existing ship in half, add a new middle section, and weld it all back together. The result is a bigger ship with more cabins, more amenities, and more profit potential — all without the hassle of building an entirely new vessel or training an entirely new crew.

CLICK HERE FOR MORE U.S. NEWS

HOW TO PROTECT YOUR ONLINE PRIVACY AND SECURITY ON YOUR NEXT CRUISE VACATION  

How to stretch a cruise ship

The process begins with engineers meticulously planning every detail of the new section to ensure that all systems will line up perfectly. The new section is constructed separately, often complete with interior fittings. Once ready, the existing ship is positioned on special lifting jacks known as “skid shoes.” Workers then cut the ship clean in half using lasers for precision.

After that, the two halves are separated to make room for the new section, which is slid into place. Skilled welders join the sections together with millimeter precision, ensuring that everything fits perfectly. Afterward, thousands of cables, pipes, and ducts are reconnected to restore functionality. Finally, every system undergoes thorough testing before the ship returns to service.

HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET 

A cruise ship split in half  (Fincantieri)

HOW TO STAY CONNECTED NO MATTER WHERE YOU TRAVEL IN THE WORLD   

The payoff: Why cruise lines love jumboization

This process isn’t just a cool engineering feat. It’s also a financial goldmine for cruise operators. The extra cabins added during jumboization can pay for the entire operation within just a few years. Additionally, it offers an opportunity to upgrade other features, such as pools and engines, or even add entirely new attractions.

GET FOX BUSINESS ON THE GO BY CLICKING HERE

A cruise ship split in half  (Silver Sea)

THE HIDDEN COSTS OF FREE APPS: YOUR PERSONAL INFORMATION

Kurt’s key takeaways

As demand for cruising continues to grow, we are likely to see more and more ships getting the jumboization treatment. This trend is a testament to human ingenuity. We can take something as massive and complex as a cruise ship and essentially “stretch” it like a piece of taffy. These “extended” vessels prove that sometimes the most impressive innovations aren’t about building something new but rather reimagining what we already have. So, next time you’re on a cruise, take a moment to appreciate the engineering innovation beneath your feet. It might be hiding a secret middle section.

What are your thoughts on the environmental impact of jumboization in the cruise industry, and do you think the benefits of expanding existing ships outweigh the potential ecological costs? Let us know by writing us at Cyberguy.com/Contact

CLICK HERE TO GET THE FOX NEWS APP

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover

Follow Kurt on his social channels

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2024 CyberGuy.com.  All rights reserved.

Ever scanned a QR code to pay for parking and thought, “Wow, that was easy?” 

Well, hold onto your smartphones because we’re about to tell you about a sneaky new scam that’s giving parkers everywhere a major headache. 

You might think you’re pretty sharp when it comes to spotting online trickery, but these fraudsters are seriously upping their game with QR codes.

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

Illustration of fraudulent QR code and website  (Redondo Beach Police)

QR codes: From convenience to con

Remember when QR codes were just those funky square patterns you’d see on product packaging? Well, they’ve come a long way, baby. These days, they’re everywhere — from restaurant menus to, you guessed it, parking meters. But while they’ve made our lives easier, they’ve also opened up a new avenue for scammers to exploit.

SMALL SIZE, BIG CLEAN: THE WORLD’S SMALLEST DISHWASHER

Fraudulent QR code (Redondo Beach Police)

DON’T FALL PREY TO THIS ELECTION SEASON’S CRAFTIEST SCAMS  

The scam in action

Picture this. You’re headed to the beautiful beaches of Redondo, California. You find a spot, stroll up to the meter and see a QR code for easy payment. Convenient, right? Not so fast. In a brazen move, scammers plastered fake QR codes on about 150 parking meters along the Esplanade and Riviera Village area. These phony codes were strategically placed right next to the legitimate ParkMobile and PayByPhone labels. Talk about hiding in plain sight.

ILLEGAL MOVIE DOWNLOADS COULD BE HIDING DANGEROUS NEW MALWARE

Head down the coast to San Clemente, and you’ll find a similar story. One unsuspecting driver fell victim to this digital deception. He scanned what he thought was a legitimate code, only to find himself on a fraudulent website. Within minutes, his wife’s credit card company was calling about unauthorized charges. Talk about a parking nightmare.

This scam isn’t isolated to California. Law enforcement agencies across the country are reporting similar scams, now dubbed “quishing” (QR code phishing). These scams typically target high-traffic areas and aim to collect personal and financial information from unsuspecting victims.

ALERT: 106 MILLION AMERICANS EXPOSED AS MASSIVE DATA LEAK ROCKS BACKGROUND CHECK FIRM

Images of ParkMobile and PayByPhone apps (Redondo Beach Police)

HOW TO AVOID BECOMING A MOVING SCAM VICTIM  

How the scam works

These scammers are using QR code technology to pull off their tricks. Here’s their playbook:

The fake sticker: The scammers create QR code stickers that look just like the real deal.

The lookalike URL: The crooks set up websites with names eerily similar to legitimate parking payment sites. For example, PoyByPhone instead of PayByPhone. Spot the difference? It’s not easy.

The data grab: Once you’re on the scammer’s site, they ask for your location and payment info, just like a real parking app would.

The quick getaway: With your data in hand, the thieves start making unauthorized charges faster than you can say “parking ticket.”

Park and pay station (Kurt “CyberGuy” Knutsson)

PROTECT YOURSELF FROM TECH SUPPORT SCAMS 

How to protect yourself

1. Scrutinize the URL: Before entering any information, carefully examine the web address for any irregularities or misspellings.

2. Use official apps: Whenever possible, use the official city parking app instead of scanning QR codes.

3. Inspect for tampering: Be wary of QR codes that appear to be afterthoughts or look like they’ve been added on top of existing signage.

4. Consider alternative payment methods: Sometimes, using coins or a credit card directly at the meter is the safest option.

5. Keep your device updated: Regularly update your phone’s operating system and security software to protect against the latest threats.

6. Avoid public Wi-Fi for payments: Public Wi-Fi networks are often unsecured, making them prime hunting grounds for cybercriminals. When making parking payments, use your cellular data connection instead. Remember, it’s better to use a bit more mobile data than to risk your financial information falling into the wrong hands. If you must use public Wi-Fi, consider using a VPN to encrypt your connection and protect your data from potential hackers. For best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android & iOS devices.

7. Be wary of unsolicited messages: Ignore links sent via email, text or social media claiming to be for parking payments. Instead, manually enter the official parking website or use the city’s app.

8. Use secure scanning methods: Your smartphone’s built-in camera is typically sufficient for scanning QR codes. Avoid downloading third-party QR code scanning apps, which could potentially contain malware.

9. Verify payment requests: If you receive a QR code for payment via email, don’t rush to pay. Contact the company directly through their official channels to confirm the request.

10. Don’t click on suspicious links: Be cautious about clicking on any links that appear in emails, texts or social media messages regarding parking payments. Scammers often use these methods to direct you to fake websites that may look legitimate but are designed to steal your personal and financial information.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android & iOS devices.

360-DEGREE THROWABLE TACTICAL CAMERAS ARE CHANGING THE GAME FOR THE MILITARY AND LAW ENFORCEMENT

What to do if you’ve been scammed

If you think you’ve fallen victim to a QR code con, don’t panic. Here’s your action plan:

Contact your bank: Immediately call your credit card company or bank to report the fraud and freeze your accounts.

File a report: Contact your local police department.

Alert the FTC: File a complaint with the Federal Trade Commission at ftc.gov/complaint.

Monitor your credit: Keep a close eye on your credit reports for any suspicious activity.

THE HIDDEN COSTS OF FREE APPS: YOUR PERSONAL INFORMATION

Kurt’s key takeaways

Remember, scammers are constantly evolving their tactics, but so are the good guys. By staying informed and using a healthy dose of skepticism, you can enjoy the convenience of digital payments without falling victim to these parking predators. So, the next time you’re out and about looking for a parking spot, keep these tips in mind, and don’t let the scammers take you for a ride.

In your opinion, how can cities better protect residents and visitors from scams like these? Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover

Follow Kurt on his social channels

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2024 CyberGuy.com.  All rights reserved.

Welcome to Fox News’ Artificial Intelligence newsletter with the latest AI technology advancements.

IN TODAY’S NEWSLETTER:

– ‘CHiPs’ star Erik Estrada says certain people using AI are not ‘very Christian’
– Las Vegas Sphere’s robot is seen ‘learning about humans’ from her interactions with guests
– OpenAI reportedly looking to strip control from nonprofit board, go for-profit in restructuring

Erik Estrada attends Hollywood celebrity sporting clays invitational luncheon and presentation at Spago on Feb. 5, 2011, in Beverly Hills, California.  (Brian To/FilmMagic)

‘CAN DESTROY LIVES’: During an interview with Fox News Digital, the 75-year-old actor and “Divine Renovation” host acknowledged the benefits of AI but cautioned that the new technology is also frequently being used for nefarious purposes.

WHAT HAPPENS IN VEGAS: Meet Aura, a humanoid robot that serves as a “spokesbot” at the Sphere located at Las Vegas’ Venetian Resort. 

Aura the robot, located at the Sphere in Las Vegas, can have conversations with guests and answer any questions he or she has about the venue or about any other topic. (Christine Gregorian)

CHANGE IN STATUS: OpenAI is working on a corporate restructuring plan that would pull control from the ChatGPT creator’s nonprofit board and transform the organization into primarily a for-profit entity, according to a report from Reuters.

Sam Altman, CEO of OpenAI, walks from lunch during the Allen & Company Sun Valley Conference on July 6, 2022 in Sun Valley, Idaho. (Kevin Dietsch/Getty Images | Nicolas Economou/NurPhoto via Getty Images)

DEEPFAKE IMPERSONATOR: Authorities are investigating a mysterious “deepfake” video call that successfully impersonated a Ukrainian high official.

Sen. Ben Cardin, a Democrat from Maryland, during an event in Upper Marlboro, Maryland, on Thursday, Aug. 15, 2024.  (Aaron Schwartz/Bloomberg via Getty Images)

Subscribe now to get the Fox News Artificial Intelligence Newsletter in your inbox.

FOLLOW FOX NEWS ON SOCIAL MEDIA

Facebook
Instagram
YouTube
Twitter
LinkedIn

SIGN UP FOR OUR OTHER NEWSLETTERS

Fox News First
Fox News Opinion
Fox News Lifestyle
Fox News Health

DOWNLOAD OUR APPS

Fox News
Fox Business
Fox Weather
Fox Sports
Tubi

WATCH FOX NEWS ONLINE

Fox News Go

STREAM FOX NATION

Fox Nation

Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.