Live data from Hacker News

CamScanner, a malicious Android app with more than 100M downloads in Google Play

kaspersky.com

11–20 of 155 posts

Re: CamScanner, a malicious Android app with more than 100M downloads in Google Play

#11
Does anyone have information on affected and unaffected version numbers? I have a version of this installed, but it's an old one, and may not have updated to the malware one because I disabled automatic updates. (Specifically because I was afraid of this, in fact.)

Re: CamScanner, a malicious Android app with more than 100M downloads in Google Play

#12

Rather than disappear it from the Store entirely, it would be nice if Google could leave a placeholder with a warning; at least it would serve an educational purpose. Also, does the Play Store app have a way to notify users of a banned app that is still installed? I decided to check my wife's phone proactively, but I don't think she would otherwise have had a clue of malware (but has been getting weird and annoying p…

If the purpose is education, I feel emails or some other direct notification would be far more helpful. It's not like we usually go to an app's Play store page after installation, save reviewing.

Re: CamScanner, a malicious Android app with more than 100M downloads in Google Play

#14

Is this just a non issue on iOS? If so, why?

I am curious too. I presume it is due to better sand boxing and a more transparent system to request resource access.

It is easier to run background processes in Android by starting new services with their own dedicated process.

And it's quite easy to run headless apps/processes.

Re: CamScanner, a malicious Android app with more than 100M downloads in Google Play

#16

Rather than disappear it from the Store entirely, it would be nice if Google could leave a placeholder with a warning; at least it would serve an educational purpose. Also, does the Play Store app have a way to notify users of a banned app that is still installed? I decided to check my wife's phone proactively, but I don't think she would otherwise have had a clue of malware (but has been getting weird and annoying p…

Or in this case, rolled back to a previous non-infected version.

Re: CamScanner, a malicious Android app with more than 100M downloads in Google Play

#17

Does anyone have information on affected and unaffected version numbers? I have a version of this installed, but it's an old one, and may not have updated to the malware one because I disabled automatic updates. (Specifically because I was afraid of this, in fact.)

Yes. There's a Reddit thread with the version information. I'll see if I can find it later when I'm off work but it made the front page so you could probably search it out fairly easily.

Re: CamScanner, a malicious Android app with more than 100M downloads in Google Play

#18

Is this just a non issue on iOS? If so, why?

Because 80+% of users are on the latest os version and the inverse is true of Android.

This doesn't use an exploit in Android and instead runs payloads with the permissions of the app. The same can happen on iOS and very likely does in many apps but is reported less often because there is no economic incentive (the App Store doesn't allow antivirus services). For an example, see how Xcodeghost went unnoticed by Apple.

Re: CamScanner, a malicious Android app with more than 100M downloads in Google Play

#19
post #2

For the past few days I've been seen spam events in my calendar about "free iPhones" and "webcam girls" - I couldn't figure out where they were coming from. I have CamScanner installed, so presumably that's the source... Now, I can remove CamScanner (which is a shame, it's a really good app), but how can I ensure the trojan is also removed? I tried the Avast AntiVirus app, but it didn't find anything. What does every…

> how can I ensure the trojan is also removed?

The trojan is inside the app. Remove the app, and you remove the trojan.

Re: CamScanner, a malicious Android app with more than 100M downloads in Google Play

#20
post #2

For the past few days I've been seen spam events in my calendar about "free iPhones" and "webcam girls" - I couldn't figure out where they were coming from. I have CamScanner installed, so presumably that's the source... Now, I can remove CamScanner (which is a shame, it's a really good app), but how can I ensure the trojan is also removed? I tried the Avast AntiVirus app, but it didn't find anything. What does every…

The calendar thing is probably this: https://lifehacker.com/how-to-prevent-spammers-from-infiltra... check your emails

I got hit by this exact one(free iphone X) recently, and couldn't find anything in my email.

Surely, that kind of email would just look like spam, so isn't the correct solution for google to just not auto-add calendar events if their source email is spam?

Post reply on HN