11 Android apps accused of collecting data for US intelligence agencies
A company called Measurement Systems in Panama has been paying Android app developers to integrate an SDK capable of collecting sensitive data from users’ phones.
According to PCMagresearchers from AppCensus say they have discovered 11 Android apps that collect sensitive information on users’ phones, including copy/paste data, phone numbers, email addresses, and more. Downloads About these malicious apps were identified up to 46 million times from Google Play Store.
 |
There are a total of more than 46 million downloads of apps containing the Data Tracking SDK afp |
In its report, AppCensus said: “Whenever a user copies/pastes something, it goes to a clipboard shared with this SDK and uploads to that SDK’s server. What’s included includes arbitrary data and may include passwords if the user uses a password manager.”
The SDK can also collect accurate GPS information and the phone number and email address associated with the device. In addition, it can identify user activities, although collection will vary depending on the application.
AppCensus said that Measurement Systems has paid developers to incorporate the SDK into the apps available on the Google Play Store, with payments up to $2.1 million to partners. According to a report from The Wall Street JournalMeasurement Systems has a relationship with a defense contractor in Virginia called Vostrom Holdings – which specializes in the Intelligence for US government agencies. Citing internal company documents, The Wall Street Journal says Measurement Systems tells app makers that it wants to get data primarily from the Middle East, Central Europe, Eastern Europe, and Asia.
In response to the report, Measurement Systems argued that the allegations about the company’s activities were untrue, and denied any connection between the company and US defense contractors.
 |
Names and download counts of apps that have been credited with SDKs from Measurement Systems Appcensus |
The list of apps detected by AppCensus to contain the Measurement Systems SDKs includes:
- Speed Camera Radar
- Al-Moazin Lite
- WIFI mouse (remote PC control)
- QR & Barcode Scanner (developed by AppSource Hub)
- Qibla Compass – Ramadan 2022
- Simple weather & clock widget (developed by Difer)
- Handcent Next SMS-Text with MMS
- Smart Kit 360
- Al Quran MP3 – 50 Reciters & Translation Audio
- Full Quran MP3 – 50+ Languages & Translation Audio
- Audiosdroid Audio Studio DAW
In October 2021, AppCensus reported its findings to Google, and Google promptly removed the apps containing the aforementioned SDK from the Google Play app market. All 11 Android apps The aforementioned has been returned to Google Play but no longer contains the Measurement Systems SDK.
In a statement with PCMagGoogle says: “All apps on Google Play must comply with the policy ours, regardless of developer. When we identify an app that violates these policies, we will take appropriate action.”
at Blogtuan.info – Source: thanhnien.vn – Read the original article here
