A game called Beaver Gang Counter, και κυκλοφορούσε από το Google Play Store, περιείχε κακόβουλο code which stole photos and videos from the Viber of the owner of the device it was installed on.
Beaver Gang Counter is an application that helps users keep score in popular card games. According to the researchers security by Symantec, the application contained malicious code that, after certain commands, began scanning the user's phone to detect the Viber application.
It then scans photos and videos that have been recorded or saved through the app.
The malicious behavior did not appear immediately, but manifested itself a long time after installation. Symantec reports that the application's malicious code communicated with an administration server and control and was asking for permission to check, collect and send the victim's device data.
This behavior did not take place shortly after installation, which allowed the app to bypass the Google Play Store app review process.
The malware detected by Symantec was named Android.Vibleaker from the company.
Symantec reports that it informed Google about the Beaver Gang Counter, and that the company immediately removed the app from its Play Store.