In what it is becoming an appellant ritual, Google removed a malicious Android application from the Google Play Store. This time, the offender is guilty FlixOnline, a malware application that has linked people, claiming to give them free access to Netflix. Her expulsion from the Play Store is great, but the responsibility is to remove you from the device if you are They were managed to download it at any time.
While most Lifehacker readers were probably smart enough to avoid application professionalsmise – two months of free Netflix for absolutely nothing! – I can see that the tone works totally for many people who, affected by a case of pandemic negligence, were simply looking something else to do during quarantine. Well, spoiler: There is no easy way to get it Free Netflix (not even from Netflix itself).
If you have installed the FlixOnline application in the hope that you will be able to stream The Queen’s Gambit at no cost, you were wrong. Instead, by granting “Overlay”, “Ignore Battery Optimization” and “Notify” permissions, you’ve got everything you need to do to spread fake authentication overlays in legitimate apps, run forever, and access (or respond to) all devices your notifications. And if you have WhatsApp installed, the situation gets even worse Check Point Research describes:
“Check Point Research (CPR) recently discovered malware on Google Play hidden in a fake application capable of spreading through users’ WhatsApp messages. If the user downloaded the fake application and unwittingly gave the malware the appropriate permissions, the malware is able to automatically respond to the victim’s received WhatsApp messages with a payload received from a command and control (C&C) server. . This unique method could have allowed threatened actors to distribute phishing attacks, spread false information or steal credentials and data from users’ WhatsApp accounts and more.
You Remember if you’ve installed the FlixOnline app or not – you’ve probably done it in the last few months. If you have, so do you‘and ruIn this case, it may not appear in the application drawer due to its ability to hide its own icon. Instead, vvhere is the equivalent of your device Settings> Applications and notifications> Application information to remove it (your Android specific path It may be different).
You will also want to change passwords for all the applications and services you use on your device, just in case. This is especially true if you have he had to log in in (or re-log in) any of your applications or services at that time since you installed FlixOnline. Finally, use this as a teaching moment and focus on it improving your security habits going forward. If something sounds too good to be true, it probably is; if you’re not sure, fast Web searching is usually all you need to do find out if an application is legitimate or incredibly suspicious.
G / O Media may receive a commission