Home Tags Posts tagged with "virus"


A fresh Android malware threat named ‘Xamalicious’ has emerged, affecting around 338,300 devices through malicious apps found on the Google Play Store. Researchers from McAfee discovered the malware in 14 apps, with three of them accumulating over 100,000 installs each before removal from the Play Store. Although removed from the store, users who inadvertently installed these apps since mid-2020 may still have active infections on their devices and are urged to delete them immediately.

The affected apps include:

Essential Horoscope for Android (100,000 installs)

3D Skin Editor for PE Minecraft (100,000 installs)

Logo Maker Pro (100,000 installs)

Auto Click Repeater (10,000 installs)

Count Easy Calorie Calculator (10,000 installs)

Dots: One Line Connector (10,000 installs)

Sound Volume Extender (5,000 installs)

In addition to the Play Store, another set of 12 malicious apps carrying the Xamalicious threat circulates on unauthorized third-party app stores, affecting users through APK file downloads.

Xamalicious, categorized as an Android backdoor, stands out for being.NET framework-based and integrated into apps developed using the open-source Xamarin framework. This uniqueness poses challenges for cybersecurity experts analyzing its code. Upon installation, Xamalicious requests access to the Accessibility Service, enabling it to perform privileged operations such as executing navigation gestures, hiding on-screen elements, and obtaining additional permissions.

Post-installation, the malware communicates with a Command and Control (C2) server to retrieve the second-stage DLL payload (‘cache.bin’). This retrieval depends on specific criteria, including geographical location, network conditions, device configuration, and root status.

Android users are strongly advised to check their devices for potential Xamalicious infections, even after uninstalling the implicated apps. Utilizing a reliable antivirus software for manual clean-up and conducting regular device scans is recommended to ensure protection against such malware threats.

Note: Users are encouraged to be cautious and vigilant when downloading apps, even from official stores, and consider employing security measures to safeguard their devices.

0 comment
0 FacebookTwitterPinterestEmail

If you have downloaded any of these apps, delete them immediately. Both of these are fraudulent messaging apps have been developed to provide a user experience that is identical or similar to that of Telegram and Signal. However, due to the fact that they are dangerous apps that are capable of stealing your data, Google has deleted them from the Android Play Store.
Signal plus Messenger and FlyGram are the names of the two mobile applications in dispute. Afore Google removed it, the former had been available on the Play Store for more than nine months and had approximately one hundred users download it. The same group was responsible for the creation of FlyGram, which was discontinued in the year 2021. Despite this, both applications may still be downloaded from third-party websites as well as the Samsung app store.
If one of these messaging apps has been installed on your device, Signal insists removing both of them immediately and ensuring that your account has been disconnected from the false apps before doing so. People who have connected an infected device to their genuine Signal or Telegram account are vulnerable to having their sent and received messages, as well as their contact list, sneaked on by malicious actors using a tool called Signal Plus.
Due to this, the users must more likely only depend on official apps for these applications. Also, it is advised that users must continue to check the list of your Connected Devices every few months to verify that no additional devices that you are unfamiliar with have obtained access to your account. Because Telegram and Signal are marketed as messaging applications that prioritize users’ privacy, it’s possible that users may become frustrated if they discover that their privacy has been violated in some way.

0 comment
0 FacebookTwitterPinterestEmail

Our News Portal

We provide accurate, balanced, and impartial coverage of national and international affairs, focusing on the activities and developments within the parliament and its surrounding political landscape. We aim to foster informed public discourse and promote transparency in governance through our news articles, features, and opinion pieces.


Subscribe my Newsletter for new blog posts, tips & new photos. Let's stay updated!

Laest News

@2023 – All Right Reserved. Designed and Developed by The Parliament News

Are you sure want to unlock this post?
Unlock left : 0
Are you sure want to cancel subscription?
Update Required Flash plugin