Threatpost reports about a fake Netflix app on the Google Play store that spreads malware to Android devices via Whatsapp messages. A Check Point Research analysis found that the actual app disguises as an app called “FlixOnline,” which promises users of free Netflix Premium access worldwide for two months. Once users install the application, the malware then steals their data and credentials. The malware also automatically responds to any WhatsApp messages that the users receive, which lures others with the same free Netflix service offer. “The malware’s technique is fairly new and innovative. The technique here is to hijack the connection to WhatsApp by capturing notifications, along with the ability to take predefined actions, like ‘dismiss’ or ‘reply’ via the Notification Manager. The fact that the malware was able to be disguised so easily and ultimately bypass Play Store’s protections raises some serious red flags,” said Aviran Hazum, Check Point’s manager of Mobile Intelligence.
Jill Aitoro is senior vice president of content strategy for CyberRisk Alliance. She has more than 20 years of experience editing and reporting on technology, business and policy. Prior to joining CRA, she worked at Sightline Media as editor of Defense News and executive editor of the Business-to-Government Group. She previously worked at Washington Business Journal and Nextgov, covering federal technology, contracting and policy, as well as CMP Media’s VARBusiness and CRN and Penton Media’s iSeries News.
The European Union Agency for Cybersecurity (ENISA) has published a report on potential cybersecurity threats for 2030, trying to anticipate future security risks based on current trends and expert opinions. While some of the less likely predictions may touch on science fiction, the top two anticipated threats are already with us today: software supply chain compromises and AI-enhanced disinformation campaigns.
Googlehas introduced its new Mobile Vulnerability Rewards Program that would offer rewards for the identification of security flaws in Google's first-party Android applications,BleepingComputerreports.