WhatsApp download alert:

If you are an Android phone user and are also on WhatsApp, this news is very important for you. In a major development, cybersecurity experts have found a fake service app on Google Play Store that offers users to view Netflix on their smartphones for free, while monitoring their WhatsApp notifications and sending automatic replies to incoming messages.

COMMERCIAL BREAK
SCROLL TO CONTINUE READING

WATCH | Click on Zee Business Live TV Streaming Below:

"According to the team from Check Point Research (CPR), named 'FlixOnline', the hackers distributed the malware via malicious auto-replies to incoming WhatsApp messages, using payloads received from a remote command and control (C&C) server," the IANS reported.  Over the course of two months, the FlixOnline app was downloaded approximately 500 times.

By replying to incoming WhatsApp messages, this method could enable a hacker to distribute phishing attacks, spread further malware, or spread false information or steal credentials and data from users' WhatsApp account and conversations, according to the experts.

"This 'wormable' Android malware features innovative and dangerous new techniques for spreading itself, and for manipulating or stealing data from trusted applications such as WhatsApp," the cybersecurity researchers was quoted as saying.

It highlights that users should be wary of download links or attachments that they receive via WhatsApp or other messaging apps, even when they appear to come from trusted contacts or messaging groups,

When the application is downloaded from the Play Store and installed, the malware starts a service that requests 'Overlay', 'Battery Optimization Ignore', and 'Notification' permissions.

If these permissions are granted, the malware then has everything it needs to start distributing its malicious payloads and responding to incoming WhatsApp messages with auto-generated replies. The experts have notified Google about the malicious application and the details of its research and the tech giant quickly removed the application from the Play Store.