This Android App was secretly recording audio every 15 minutes
+
+
+
+ + +
+
+
+
+ + +
+
+
+
91Mobiles
iRecorder Screen Recorder
> If you got iRecorder Screen Recorder app installed on your smartphone, uninstall it right away.
> The app secretly records and sends audio every 15 minutes to an attacker-controlled server.
> The app was launched in September 2021 and has 50,000 downloads.
+ + +
+
+
+
91Mobiles
How was the issue discovered?
> The iRecorder Screen Recorder issue was discovered by Security researcher Lukas Stefanko
> Stefanko tested the app on multiple devices and discovered that it recorded audio every 15 minutes.
> He observed that the app received a command to record and send one minute of audio to the attacker's server every 15 minutes.
+ + +
+
+
+
91Mobiles
What were the issues?
> The app had the ability to remotely activate the Android device's microphone and record audio.
> It could connect the Android device to a hacker-controlled remote server and upload the recorded audio to it.
> Additionally, the app could also upload sensitive files found on the device.
+ + +
+
+
+
91Mobiles
Is the App still available?
> The app has been removed from the Google Play Store.
> However, iRecorder Screen Recorder's recording instructions persist as long as it is installed on the devices.
> While malicious apps may be able to easily bypass Google's security systems, they're also quickly removed from the Play Store.