January 2nd 2025.
Attention Amazon Fire Stick users! Cybersecurity experts are warning you to immediately delete a suspicious app that has been found to be secretly spying on its users. This app, known as 'BMI Calculation Vsn' and published by 'PT Visionet Data Internasional', was promoted as a body mass index calculator tool and was available on the Amazon Appstore for Android devices. However, Amazon has since removed it from their store, but it is believed to still be installed on many devices. The computer security company McAfee is urging people to uninstall this app in order to protect their privacy.
Upon opening the app, users are brought to a simple page where they can enter their weight and height to calculate their BMI. However, the app asks for permission to record the user's screen as soon as they click the 'calculate' button. This intrusive request raises concerns about the app's true intentions. A pop-up message explicitly states that the app will have access to all the information visible on the user's screen, including sensitive data such as passwords, payment details, photos, messages, and audio. McAfee, which discovered the malicious nature of this app, warns that it may even capture gesture passwords or sensitive information from other apps.
Unfortunately, many users often click through these permission requests without fully reading or understanding the implications, simply so they can use the app. Once the app has been granted permission, it immediately begins to snoop on the user's device, collecting information about installed apps and potentially capturing sensitive data, such as one-time passwords, verification codes, and other personal information. This is a major red flag, and McAfee advises users to be cautious and vigilant when it comes to granting app permissions.
The app was cleverly disguised as a BMI calculator, similar to the one offered by the NHS, which calculates a person's BMI based on their height and weight. However, the app's true intentions were revealed in its description on the app store, where it stated that it collects 'user info'. The app records the user's activity in an MP4 file, but thankfully, it does not upload the clip to a 'command and control' server, which is a central location where scammers can remotely access and control the malware on your device. According to McAfee, this suggests that the app was still in its early stages of development when it landed on the Amazon Appstore.
To avoid falling victim to such dodgy apps, McAfee offers some helpful tips. Firstly, they recommend installing trusted antivirus software to detect and prevent malicious apps before they can cause harm. They also advise closely reviewing app permission requests and denying any permissions that seem unrelated to the app's advertised functionality. Additionally, users should stay alert for any unusual app behavior, such as decreased device performance, rapid battery drain, or abnormal data usage, as these may indicate the presence of malicious activity. It is also important to only download apps from well-known and reputable publishers, as even with strict screening processes, some malicious codes can slip through the cracks.
Experts believe that the scammer behind this app may have used the name 'PT. Visionet Data Internasional' to deceive users into thinking it was a legitimate company. However, upon further investigation, it was discovered that the app was initially designed as a screen recording app before being rebranded as a BMI calculator. This serves as a reminder that even seemingly harmless apps can hide hidden threats. It is crucial to remain vigilant and take necessary security measures to protect our privacy and data.
In addition to this particular app, there have been other cases where so-called 'dodgy' Fire TV Sticks have been tampered with to allow users to illegally stream content. However, these devices may also be storing user data that can be sold for profit or come pre-installed with apps that can allow unauthorized access to home networks and webcams. McAfee reiterates the importance of staying alert and taking proper security measures to safeguard our privacy and data. Let's all work together to protect ourselves from potential threats.
[This article has been trending online recently and has been generated with AI. Your feed is customized.]
[Generative AI is experimental.]
