Spyware Apps on Google Play Store Sending Data to China: Urgent Uninstall Required

Two file management apps on the Google Play Store, with over 1.5 million downloads combined, have been found to contain spyware that sends user data to servers in China. The apps, named "File Recovery and Data Recovery" and "File Manager," were discovered by cybersecurity firm Pradeo. The spyware is designed to steal various types of sensitive information, including contact lists, media files, real-time location, and device details. The apps have advanced permissions to hide their icons and make uninstallation difficult. Users are advised to delete the apps, and organizations are encouraged to educate employees about mobile threats and implement mobile detection and response measures. This discovery highlights the need for improved app analysis processes in app stores to prevent the distribution of malicious apps.