• Sanctus@lemmy.world
    link
    fedilink
    English
    arrow-up
    65
    ·
    2 months ago

    Wuta Camera, Max Browser, WhatsApp Mods, Spotify Mods, and Minecraft Mods were found to be infected with a Necro Sideloader. All the apps are shown to contain CoralSDK. If you downloaded any of this remove the apps and wipe your phone.

  • LOLjoeWTF@lemmy.world
    link
    fedilink
    English
    arrow-up
    25
    ·
    2 months ago

    I find it hilarious that the image is of Google Play and the title used the word “this”. Pretty misleading

    • sorghum@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      1
      ·
      2 months ago

      As someone de-googing, it’s not too far off in my eyes. Apps depending on GSF is a major hindrance.

    • Teils13@lemmy.eco.br
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      4
      ·
      2 months ago

      It is unintentionally correct: Google Play, and its contents, is corporate malware, people should use F-Droid to get safer and free (as in freedom) apps. Neostore is a nice app to access it.

      • Misk@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 months ago

        I got so fed up with Neostore mishandling updates and sending me constant notifications about it that I’ve uninstalled and gone with Droidify instead.

  • MangoPenguin@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    1
    ·
    2 months ago

    Doesn’t the play store have their “Play Protect” thing they’re always shoving in my face? Why didn’t that pick this up before 11 million people installed the app?

    • Draconic NEO@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      2 months ago

      Because play protect is a piece of shit that is not very reliable. Google mostly uses it to block installation of apps or remove apps that they don’t like such as cracked apps, or apps that are used to crack other apps.

      The real malicious apps are typically able to sneak past it.

  • Zement@feddit.nl
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    3
    ·
    2 months ago

    Isn’t Kaspersky literally Russian Spyware? How have they still any credibility?

    • pandapoo@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      23
      arrow-down
      3
      ·
      edit-2
      2 months ago

      Yes… no… sorta…kinda… but no different than how most, if not all, large American security and tech vendors have either overt, or covert, links to the the American Security State.

      Kaspersky is a long established credible actor and leader in the threat research space, hands down one of the best track records over the long run, and you should take their reporting and disclosures seriously.

      I’m not saying that to dismiss the very valid concerns about installing Kaspersky on sensitive private sector and government systems, but to contextualize my answer.

      On a sort of related note, earlier I said that the American security state has both overt, or covert, links all across the American tech sector.

      What that means is that, even if a company holds their principles not compromising their customers or their product, the US government can either get a court order to force it, or they’ll be targeted by something like the Pentagons Signature Reduction program and have sheep dipped employees worked into their organization.

      Point is, Kaspersky is one of the few remaining Russian brands and entities still holds a lot of credibility in it’s field, but again, that doesn’t mean the concerns of Western government’s aren’t valid, just that they should be viewed in the proper context.

      • Zement@feddit.nl
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 months ago

        Great explanation! So, to summarize: They know their trade but their software should not be installed because it’s like with US Software: Backdoors Likely Integrated.

        On the other side, I still use some Google Products…

        • pandapoo@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          2 months ago

          No problem, happy it helped.

          Your summary is mostly accurate, but I think a better way to understand it would be like this:

          Low level security software, by nature, is the ultimate attack vector, if compromised.

          Assume that all countries that have both a domestic tech sector, and a well-resourced national security apparatus, have some version of on demand government initiated supply chain attack capabilities.

          So it’s not like I believe that all Kaspersky installs include a RAT piped directly to some GRU/FSB unit, just the ability for a malicious payload to be inserted - just as the NSA can do with American tech companies.

          Not every risk can be mitigated, but some risks just shouldn’t be taken.

          • Zement@feddit.nl
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 months ago

            The difference for me is: As for now, the US is not run by a fascist (yet). Injecting Malicious Software to bust terrorism/mafia/corruption… ok,… Injecting Malicious Software to kill gays/opposition… Nope (and that is what I would expect the Russians to do)

            • pandapoo@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              2
              ·
              edit-2
              2 months ago

              I think you’ve confused my previous comments as some sort of moral equivocation, which they really weren’t meant to be, but since you brought it up…

              You may believe that America’s intelligence agencies, on balance, are more moral than Russia, and you’re probably right, but that is damning by faint praise.

              Espionage is literally the act of committing crimes on behalf of a government. It’s not altruistic and it’s not used to fight the good fight of corruption, or the mafia. In fact, it’s often done in conjunction with those actions and organizations, because that is what the job often requires.

              Either way, Russia doesn’t need Kaspersky to run its domestic surveillance network or it’s myriad of police state apparatuses.

              FYI oftentimes terrorism is blowback from actions taken by intelligence agencies years, or decades, prior. That is, the groups and ideologies they fund, train, and use, for their own ends, don’t cease to exist just because they’re no longer useful, or needed, by those agencies.

              • Zement@feddit.nl
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 months ago

                Yes you are 100% correct (or at least in line with my views… which I think should be correct)

    • ravhall
      link
      fedilink
      English
      arrow-up
      5
      ·
      2 months ago

      No more than crowdstrike is for the American government. But yes.

  • MilitantAtheist@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    2 months ago

    Whatever. Kaspersky is an FSB spy tool. You should not have any of their software installed on any devices.