A game called Beaver Gang Counter, and was released by Google Play Store, περιείχε malicious code that stole photos and videos from the Viber of the owner of the device it was installed on.
The Beaver Gang Counter is an application that helps users keep the score on popular card games. According to Symantec security researchers, the app contained malicious code that, after specific commands, began scanning the user's phone to locate the Viber application.
It then scans photos and videos that have been recorded or saved through the app.
Malicious behavior did not appear immediately, but manifested itself a long time after installation. Symantec says the app's malicious code communicated with a command and control server and asked for permission to control, collect and send the victim's device data.
This behavior did not take place shortly after installation, which allowed the app to bypass the Google Play Store app review process.
The malware detected by Symantec was named Android.Vibleaker from the company.
Symantec reports that it informed Google about the Beaver Gang Counter, and that the company immediately removed the app from its Play Store.
