27 February 2024 , 09:16
720
0
There's a new warning for all Android users and you'd be wise not to ignore it. The latest threat to hit these popular devices arrives in the form of a malicious text message that, once clicked, sets about installing vicious XLoader (codenamed MoqHao) malware that's fully capable of stealing highly personal data.
The latest issue, which has been spotted by the security experts at McAfee, is made worse by the fact that it needs limited user interaction to install itself onto devices. XLoader isn't actually a new threat but in the past it needed Android owners to install and launch an app loaded with the bug.
That's now changed, with cyber crooks simply sending out fake text messages that, once clicked, download and add the threat without the user ever knowing.
"Typical MoqHao requires users to install and launch the app to get their desired purpose, but this new variant requires no execution.," explained McAfee's Dexter Shin.
Another trick being used by thieves is getting Android users to agree to dangerous permissions via fake Chrome pop-ups. If fooled, it allows the sideloaded application to run in background and siphon data including user names and passwords.
Samsung Galaxy S23 we got hands-on with the new Samsung S23 Ultra, 23+ and S23
It's clearly concerning, especially as tapping on a harmless-looking text could instantly expose your phone to hackers.
Luckily, it appears Google is one step ahead with the tech giant offering protection against this latest threat. All users have to do is check they have Play Protect activated on their devices.
HOW TO CHECK FOR PLAY PROTECT
• Open the Google Play Store app Google Play.
• At the top right, tap the profile icon.
• Tap Settings.
• To check if your device is Play Protect certified, tap About.
How to turn Google Play Protect on or off
Important: Google Play Protect is on by default, but you can turn it off. For security, we recommend that you always keep Google Play Protect on.
• Open the Google Play Store app Google Play.
Walking tracker one of 12 apps banned by Google as users urged to delete them
• At the top right, tap the profile icon.
• Tap Play Protect and then Settings Settings.
• Turn Scan apps with Play Protect on or off.
"Android users are currently protected by Google Play Protect, which is on by default on Android devices with Google Play Services," explained McAfee.
"Google Play Protect can warn users or block apps known to exhibit malicious behavior, even when those apps come from sources outside of Play."