{"id":17937,"date":"2018-05-16T08:00:47","date_gmt":"2018-05-16T12:00:47","guid":{"rendered":"https:\/\/www.psafe.com\/en\/blog\/?p=17937"},"modified":"2022-04-27T15:24:24","modified_gmt":"2022-04-27T19:24:24","slug":"malware-hidden-in-qr-reader-apps-infects-android-devices","status":"publish","type":"post","link":"https:\/\/www.psafe.com\/en\/blog\/malware-hidden-in-qr-reader-apps-infects-android-devices\/","title":{"rendered":"Malware Hidden in QR-Reader Apps Infects Android Devices"},"content":{"rendered":"

Malware hiding within apps is nothing new to the industry, but the latest occurrence has a focus on QR-Code readers – and worst of all, the malware itself is smart. This begs the question, how do you prevent your phone from being a casualty? <\/span><\/p>\n

One way to ward off malicious apps is to download a third-party security app such as dfndr security<\/a>, which includes a <\/span>full-virus scan feature<\/span>. A scan of your Android device will do a deep dive into your files and even your SD card. Worried that you might forget to scan your phone regularly? Not a problem, just use scheduled scans which can run while you\u2019re asleep. <\/span><\/p>\n

Read More: <\/b>Is it Safe to Download Apps Outside of Google Play?<\/b><\/a><\/p>\n

In this latest case of infected apps, a piece of malware known as \u2018Andr\/HiddnAd-AJ\u2019 (try to say that ten times fast) was able to load itself onto a number of apps designed to read QR-Codes. Apps infested with the malware included: QR Code \/ Barcode Reader, QR Code Free Scanner, and QR & Barcode Scanner. There were a total of seven apps infected, and the malicious apps were downloaded over 500,000 times before being pulled by the Google Play Store.<\/span><\/p>\n

We know how hard it can be to avoid malware in a world filled with it, but here are a few tips to get you started on a safer journey through the endless world of Android apps.<\/span><\/p>\n

Download Only Official Sources
\n<\/b>We\u2019re aware that this point may appear moot as we noted that the infected apps came from the official Google Play Store, but even though an <\/span>official source may not be 100% clean<\/span><\/a>, it\u2019s still much safer than downloading an app elsewhere. Despite missing the occasional piece of malware, Google has quite a positive record of keeping their ecosystem clean from the mess.<\/span><\/p>\n

Avoid Apps From the Web
\n<\/b>As you can infer from our last comment, you\u2019re best to avoid downloading apps directly from the Internet or\u00a0something you found on social media. These apps are more likely to be infected with dangerous malware and are typically prefaced with a request to turn off a security feature to allow app installations from \u2018unofficial sources.’ Take this as an immediate red flag and don\u2019t download.<\/span><\/p>\n

Watch Those Permissions
\n<\/b>Once you\u2019ve downloaded an app from an official source such as Google Play or Amazon App Store, try to remain aware. Legitimate apps ask for permissions to<\/span> access certain parts of your system<\/span><\/a>. In some circumstances, this is normal but use your best judgment. A new email app would request access to your contacts, but why would a QR-Code reader need the same? <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

QR Code, a seeming byproduct of a postage stamp and a barcode, has been infected with malware.<\/p>\n","protected":false},"author":83,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[5],"tags":[30,210,182,545,67],"class_list":["post-17937","post","type-post","status-publish","format-standard","hentry","category-security","tag-android","tag-apps","tag-malware","tag-safety","tag-smartphone"],"_links":{"self":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/17937","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/users\/83"}],"replies":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/comments?post=17937"}],"version-history":[{"count":7,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/17937\/revisions"}],"predecessor-version":[{"id":18715,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/17937\/revisions\/18715"}],"wp:attachment":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/media?parent=17937"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/categories?post=17937"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/tags?post=17937"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}