Android apps usually have the access to the user’s data. To make sure, there are many security processes involved so that privacy is not breached or the data isn’t stolen or misused. However, this is not the case with Android apps. Loopholes and gaps still require attention. Recently, experts identified a fake SMS Android app that steals phone numbers. It steals phone numbers to create an account number.
A security researcher at the cybersecurity firm Evina discovered the fake SMS Symoo.This app uses the phone number of the users who have installed it to send the One Time Code. Interestingly, it has been downloaded 100,000 times and has a 3.4-star rating on Google Play Store.
It secretly acts as an SMS relay for an account creation service for sites like Microsoft, Google, Instagram, Telegram, and Facebook. People engaging in illegal activities often use pseudonymous accounts as phone numbers typically verify accounts.
The description of the app is ‘simple use SMS application’. When installed, it requests permission just like a normal app. It looks quite normal. When the app has the user’s phone number, a fake loading screen appears. It sends out multiple two-factor authentication (2FA) text messages to help others create and verify new online accounts. Once the user completes this process, the loading screen disappears and freezes, rendering the application unusable. The user experiences the damage when uninstalling it.
Leonardo-4th Most Powerful Supercomputer
Google’s spokesperson announced that the Google Play Store removed the fake SMS app, and they also banned the developer.
You need to be extra careful while downloading new apps on Android smartphones. Although, Google Play Protect scans new apps and malware installed on the phone. As a precautionary measure, it is better to use the apps installed on the phone.