Despite being used by millions of users worldwide, Android continues to be prone to various exploits. Unfortunately, the operating system is often targeted by suspicious apps that smartly trick the user into installing them.
This happens mainly because malicious apps successfully bypass Google Play Store’s security checks and end up there available for download. Once the installation is done, the Android device is no longer safe as well as the user’s personal information because a spyware app has been silently installed.
System Update Spyware App Tricks Users into Installation
A good example of a well-played scheme is the System Update scam that posed as a legitimate app in the Google Play Store. According to security company Zscaler, System Update is the name of an app that claimed to grant users access to the latest software updates of Android. The claim is ridiculous as Android updates are installed automatically and do not require additional download. In other words, the user should not be prompted this way to install Android system updates.
Researchers identified the “System Update” app when detecting an Android application through the z9 malware engine, which powers zIPS for on-device detection. Upon further investigation, it was revealed to be a highly sophisticated spyware campaign equipped with intricate capabilities. In addition, the team verified with Google that the app has never been listed on Google Play.
Furthermore, installing OS updates is definitely not an action that should be performed by unknown third party apps.
Unfortunately, a huge number of users were lured by the scam as visible by number of downloads. Apparently, the System Update spyware has been installed between 1 and 5 million times since it entered Play Store in 2014. The app is in fact the Android spyware known as SMSVova.
System Update Spyware Continuously Installed on Android Devices
What is weird is that the app got this many downloads despite the tons of bad reviews saying that it wasn’t working. As explained by the researchers:
The app portrays itself as a System Update and its description on the Google Play Store states, “This application updates and enables special location features,” but there is no mention of its remote spying capabilities.
Then, researchers say that as soon as the user tries to start up the app, it abruptly quits with the message: “Unfortunately, Update Service has stopped.” The app also has the ability to hide itself from the main screen.
The System Update spyware app has successfully avoided detection for a long time. Even though the app’s last update was in December 2014, Android users continued to install it thus compromising the privacy of their devices.
Milena Dimitrova
An inspired writer and content manager who has been with SensorsTechForum since the project started. A professional with 10+ years of experience in creating engaging content. Focused on user privacy and malware development, she strongly believes in a world where cybersecurity plays a central role. If common sense makes no sense, she will be there to take notes. Those notes may later turn into articles! Follow Milena @Milenyim
Follow Me: