- Music player for vk mac for android#
- Music player for vk mac android#
- Music player for vk mac code#
- Music player for vk mac password#
Music player for vk mac password#
If you have installed VK Music or a similar app for listening to music on VKontakte, we strongly recommend you remove it and immediately change the login and password to your account on the network. We urge users to be careful and not to enter their login details in third-party apps. Effectsįor the user, the theft of his VKontakte authorization data will go unnoticed until the criminals decide to use the data and change the login/password or start sending spam from a stolen account. Our data suggests that one of the earlier versions was 10 times as popular, meaning that version alone could have infected hundreds of thousands of devices. What makes the situation worse is the ease with which the fraudsters upload every new version of the Trojan in place of those that are blocked.īy the next day the version published on 4 October already had an average score of 4.5 with more than 600 user ratings.Īccording to Google Play, the latest version was downloaded by between 100 000 and 500 000 users in just two days. We cannot confirm that all those versions were published on Google Play we have only seen seven of them. At the same time, according to data in the Trojan code, it was the 15th version of the application. It was at least the seventh version of the malicious application the earlier six modifications were removed by Google. The latest version known to us was published on 4 October. Only the package name differed for all the versions – the functionality remained unchanged. Then the versions were modified every 6-10 days.
The first version of the malicious VK Music app known to us was published on Google Play on 16 August 2015.
Music player for vk mac android#
Such apps are very popular among Android users. Mass infectionĪs mentioned above, VK Music could be downloaded from the official Google Play store. In addition to promoting groups, the attackers can change passwords and use stolen accounts at their own discretion: we know of cases when victims of the Trojan lost access to their accounts on VKontakte after a period of time. The Trojan then contacts its server for a list of groups to be promoted by the attackers and immediately adds the stolen accounts to these groups. It should be noted that this method of transferring the logins and passwords could also result in them being used by other criminals, because the secure HTTPS protocol is not used. At the same time, a Trojan sends the verified login and password to a cybercriminal server in ordinary text. If authentication is successful, the user can listen to music uploaded to the social network. Immediately after running, VK Music asks users to enter their login and password for their VKontakte account so that the app can function on the site.Īfter users enter their login details the app sends them to the legitimate authentication server oauth.vk.com. By our estimates, the attackers could have used the app to steal hundreds of thousands accounts from users of the social network. VK Music was available for download at the official Google Play app store.
Music player for vk mac code#
But further study showed that it also contained malicious code designed to steal VKontakte user accounts and promote certain groups on the social network. And our path to revealing large-scale theft of VKontakte users’ personal data began with an email from a user asking us to take a look at a suspicious app.Īt first glance, the VK Music app only displayed legitimate functionality – it played audio files uploaded to the social network.
Music player for vk mac for android#
Kaspersky Internet Security for Android.
0 kommentar(er)
