Malware-infected Android app records users' audio without consent.

The iRecorder Screen Recorder app, which had over 50,000 downloads from Google Play, was found to have been updated with malicious code that allowed it to surreptitiously record nearby audio every 15 minutes and send it to an attacker-controlled server. The app used code from AhMyth, an open source RAT, and was heavily modified to become AhRat. The purpose of the app remains unclear, but it is possible that it is part of an active espionage campaign. Google has not commented on the discovery of the malicious app.