More malware lurking in the Google Play Store

You need to keep any credentials you have secret, they are you method of authentication so you can prove beyond a doubt who you are to your bank, Microsoft 365, to Amazon etc. (Have a look at this post on CyberAwake to see how authentication fits into your cyber security plan.) So malicious apps that steal credentials are a real cybersecurity problem. Google is making an effort to add confidence to the Play Store, but determined threat actors can squeeze by and infect you.

The sneak here was the malicious code was added after the apps were submitted to the Play Store in an update delivered directly to the device.

SharkBot malware sneaks back on Google Play to steal your logins (bleepingcomputer.com)

Here is something else for you to think about:

Do you have a policy in place for when employees install apps to a device they are using as a BYOD device?

You don’t!

Further Reading

I really like this – more transparency in the Google Play Store and the way apps will use your personal information – Smart Thinking Solutions

Will this be a more strict Google Play store? – Smart Thinking Solutions