Experts have warned Android users that an application on the Google Play Store can steal their data. Software company eSet has identified a screen recorder application called iRecord that is infected with malware.
This app is available on Google Play Store since September 19, 2021 and has been downloaded more than 50 thousand times.
However, according to eSet, the app was not infected with the malware from the beginning but got infected around August 2022.
Experts point out that it is unusual for developers to update malicious code months after uploading a correct app. T
he report presented by the company said that the malicious code included in the updated version of iRecorder is based on the open-source AhMyth Android RAT (remote access trojan) and has the form of AhRat.
According to the company’s report, the app’s distinctive behavior, i.e. ultra-quiet microphone recording and Stealing files with specific extensions indicates that the app is part of a spyware campaign. However, the app cannot be linked to any specific criminal group.