android security – PSafe Blog

Scary Spyware Apps Found on Google Play

PSafe Newsroom — Sun, 03 Sep 2017 01:00:51 +0000

Android users are facing yet another threat from infected Google Play apps, this time in the form of a type of malware named SonicSpy. Capable of accessing, recording, and collecting sensitive information, the frightening malware spawned itself in countless iterations across third-party application platforms. While Google Play removed the infection, Android users shouldn’t feel safe just yet, as similar attacks in the future are possible. To fully protect your device always have the full virus scan feature activated. Click now to turn it on:

The full virus scan feature thoroughly searches your phone and SD card for malware and scans all apps for adware. The cutting-edge dfndr technology is updated in real-time, giving it the capability to protect your smartphone from the SonicSpy malware, or other malicious viruses lurking on your Android phone.

What is SonicSpy?
Masquerading as messaging apps, over 1,000 malicious applications flooded third-party Android app platforms in recent days. Three of these apps were available through the Google Play store: Soniac, Troy Chat, and Hulk Messenger. While the apps have since been removed from Google Play, the spyware apps had been downloaded by thousands of users in the meantime. This strain of spyware has tremendous capabilities, able to execute 73 remote instructions such as recording phone calls and audio, making calls and sending messages without user authorization, controlling the phone’s camera, and stealing information like logs, contacts, and Wi-Fi access details.

How SonicSpy Works
Marketed as customized versions of familiar apps, SonicSpy was able to make its way onto Google Play and other app platforms under this guise. Once downloaded, the malware hides its launcher icon in order to avoid detection from smartphone users and to establish a connection to C2 infrastructure. SonicSpy also utilizes Bind Accessibility Services within the Android operating system in order to capture and record text descriptions of the Android user’s phone activity.

Future Threats
The SonicSpy malware shares a strikingly similar approach to SpyNote, a malware strain that appeared in 2016. According to Michael Flossman, the security researcher who initially identified the threat, the two strains rely on dynamic DNS services and the non-standard 2222 port on top of sharing many code similarities. Both SpyNote and SonicSpy have been linked to an Iraqi developer, whose repeated attempts to infiltrate Android app stores suggests that Android users should continue to be wary of unfamiliar apps, even those hosted by Google Play. Before downloading new applications, smartphone readers should read reviews of the app and make sure their anti-malware software is always running.

Android vs. iPhone: Which One Has Better Security?

PSafe Newsroom — Thu, 27 Oct 2016 11:48:39 +0000

Not that long ago the FBI asked Apple to create software to unlock a criminal’s iPhone. Apple refused to help them. One of the reasons cited was that if Apple complied, the “backdoor” would not only weaken our personal right to privacy, but the security of our devices as well. What if a hacker was able to access that software? Apple instead decided to further strengthen the security of their products through increased encryption. This instance certainly shows that Apple cares about security and privacy — but it doesn’t necessarily mean that their devices are safer to use than Android devices.

It’s true that Android’s open platform makes it slightly more vulnerable to hackers and malware. This allows more dangerous apps to exist, or hackers to gain access to your phone through popular apps. However, this isn’t an Android-exclusive issue. Recently, malicious companies have been tricking social media users into downloading their apps from a link, instead of from Apple’s app store. iPhones are also susceptible to malicious links sent by text message or a multimedia message, which is another issue that has plagued Android phones. Luckily, Google and Apple are extremely concerned about security, and will take care of any security threats quickly. If you download all of your apps from the Play store or Apple’s app store, you will greatly reduce your risk of a security threat to your device.

As an added security feature, Google will start releasing automatic security updates, which will allow any threats to be taken care of as quickly as possible. This is a crucial move, considering that Androids are more likely than iPhones to miss security updates. Android users are also more likely than iPhone users to be using an older operating system, which can pose a security threat to the device and its data.

Ultimately, an Android phone isn’t necessarily more secure than an iPhone, and vice versa. It depends on how you use the devices, and your awareness of safe practices. This includes practices such as not ignoring software updates, avoiding unknown or suspicious links, and not accessing your banking information on public Wi-Fi.

Download PSafe Total
Add an extra layer of security to your Android phone with PSafe Total. PSafe Total is an antivirus and cleanup app that will ensure your device is protected against malware and running efficiently 24/7.

Drammer Attack Threatens Millions of Android Users

PSafe Newsroom — Tue, 25 Oct 2016 21:33:53 +0000

Google has recently discovered a new security threat that could leave your Android device exposed to hackers. Much like the Linux-based attack known as Rowhammer, Drammer is a particularly pernicious form of malware that allows hackers to gain full access to your phone by first targeting a specific memory chip. Because of this security loophole, all PSafe users who have downloaded apps recently should click below immediately to remove threats.

For the most part, the attack is transmitted through an app that contains harmful code. Once the app is downloaded, it can repeatedly activate a specific row of memory chip transistors to cause a bit flip (a switch of states from 1 to 0 and/or 0 to 1). Since all data is written in binaries, having the ability to change values for stored information is the equivalent of successfully picking a lock.

According to Emilio Simoni, PSafe’s Security Manager, checking the app permissions before downloading them does not work, because the malware does not need any permission to perform this kind of attack. “We strongly advise users to download apps only in Google Play, and check if the app is well recommended,” he says.

With PSafe Total’s Quick AV Scan active and running, any threats to your phone will be immediately detected and removed. Click below to check if

How Frequently Should You Change Your Passwords?

PSafe Newsroom — Tue, 04 Oct 2016 21:47:18 +0000

There is a lot of contradictory information online about how frequently we should change our passwords. More than a decade ago, we might have used the same password for years, across a variety of different accounts. This is no longer an acceptable practice. With an increasingly technological world comes an increase in malicious threats. These threats not only target large financial companies and the like, but may also attempt to steal our personal information.

In an attempt to prevent access to our personal information, we’ve had to create stronger, complicated passwords for each account that are ideally “hack-proof.” Not only is this a difficult process, but it’s also been recommended that we change our passwords frequently — sometimes every 60 days. However, changing our passwords this frequently isn’t beneficial for us, nor does it make our accounts and information more secure.

Bad Password Habits
If you’re told to change your password for an account multiple times per year, you’re more likely to create “bad” passwords. Instead of putting in enough effort to create a strong password, you might minimally change a current password by altering a number, adding a different symbol, or else changing a lowercase letter to an uppercase letter. Add in the fact that you probably have at least a dozen different accounts that require passwords. If you change your passwords for all of these accounts too frequently, you’re not only making everything harder for yourself in terms of memorization, but you’re making those accounts less secure.

How Often You Should Change Your Password
Changing your password once (or twice) per year should be sufficient. If you change your password more frequently than that, such as every few months, you’re putting yourself and your account at risk. Even if you were to make strong new passwords every few months, you wouldn’t necessarily prevent any security risks. It would be more troublesome for you than for a potential hacker. However, if you feel like your password has been compromised, is too weak, or if you’ve shared it with someone else, then by all means change it immediately. But make sure you take the time to think of a strong, complex password that will secure your account until it’s time to change it again.

Download PSafe Total
If you really want to make your personal information more secure, download PSafe Total for your Android device and PSafe Total Windows for your PC to ensure that your data is protected against malicious threats 24/7. With PSafe Total’s Vault feature, you can even create a second password for important apps.

The Major Threats That Target Your Backed Up Data

PSafe Newsroom — Fri, 30 Sep 2016 22:30:34 +0000

The Cloud Security Alliance is working hard to make cloud technology virtually impenetrable. Lately, they have released a list of practices that will keep your cloud drive at maximum security. Here’s what they found.

Loss of Data
When you backup your data, it is sent to your cloud service provider. As a result, you place full faith in them to responsibly protect your data. Unfortunately, the cloud service companies don’t always vigilantly protect the stored data. To avoid this, you should ensure that your cloud service provider has protection against accidental deletion. It is also important to confirm that your provider has some form of duplication with your data in case the original files get deleted.

Account Hacking
Hackers are constantly finding clever ways to gain access to the credentials that keep your account safe. There are a few easy steps you can take to keep your passwords safe. First of all, do not click on any emails that have suspicious content. Many of these emails are malicious and designed for phishing your account and hacking your password. Moreover, it is important that you use different passwords across different accounts. If you use the same password for your email, work, and social media accounts, then a hacker will have easy access to all of your personal information.

Insiders
Business partners and former employees can potentially breach the credentials of your business if you are not careful. If an employee leaves the company with significant knowledge of company security information, then they can easily circumvent the security systems and hack your systems. Information Technology policies can amend for these vulnerabilities in the backup data.

So now that my backup data is protected, what about my cell phone?
PSafe Total is a phone application that provides a variety of services that will help optimize the speed, safety and functionality of your device.

Advanced Protection is a function within PSafe Total that allows PSafe to protect your device from third-party uninstalls in case of loss or theft. This maximizes the privacy of your photos, messages, and personal data.

PSafe Total also contains anti-theft protection. The system can track, block, locate, and even erase all of your data remotely in case of loss or theft.

How to Ensure That You Remain Anonymous Online

PSafe Newsroom — Wed, 28 Sep 2016 21:42:34 +0000

If you have a deep online footprint, it’s simple for hackers to find and use information online. While you already know how to use technology to keep your family safe, do you know how to keep yourself protected online? One way is to lessen your online footprint — by staying anonymous as much as possible. Here are five ways to do just that.

Get rid of plug-ins
Plug-ins often leave trails of the sites you’ve used or purchases you’ve made. Specifically, they reveal your location and identity. If you want to browse anonymously, plug-ins should be some of the first things that go.

Forgo paying online with credit cards
Credit cards used in online shopping give away your information right away. PayPal, too, keeps records of you that can be tracked by hackers. The only way to remain truly anonymous while buying online is with an e-currency like bitcoin or the like. Since bitcoin isn’t used very often, though, your best bet might be forgoing online shopping entirely.

Create “burner” accounts
Burner accounts are accounts that all have different passwords and passcodes. Rather than keeping a single password that can let a hacker who gets some of your information get all of it, you should change your password for each login you create. Further, you should make sure you’re changing your passwords often.

Browse the Internet anonymously
The best way to browse anonymously is by connecting to different wireless connections, rarely visiting the same connection twice. You can also download a proxy server that doesn’t reveal your real location or IP address. A good proxy server is called ProxyGambit, which scrambles your location and IP address so you’re not traceable.

Only use certain websites
Only use websites that start with HTTP or HTTPS. These websites are anonymous, but others without these letters show your identity and location. Further, you want to make sure you’re only browsing — and definitely only buying from — websites with identity certificates.
Want another excellent way to stay protected online? Download PSafe Total for free. PSafe’s unmatched Anti-virus protection scans your phone’s SD card and files regularly so hackers won’t have a chance to steal your information. Plus, PSafe’s Memory Booster keeps your phone running as quickly as the day you brought it home.

Security Features of the Android 7.0 Nougat

PSafe Newsroom — Fri, 23 Sep 2016 18:44:49 +0000

Android 7.0 with Nougat (yep, that the system’s name) software was just released in early August. This Android is packed with updates, including a split-screen mode, notifications bundled by app, and, yes, even an awesome, secret cat collecting game. But, like most technology updates, Nougat also has some great new security features that are worth mentioning. Here are six of the big ones.

Improved Encryption
The encryption on the Nougat is more sophisticated than in systems past. The explanation can be confusing, but just know that it moves encryption to the file level to improve security.

Data Saver
With the data saver mode running, you can make sure that any app running in the background of your phone won’t be able to send and receive data without your knowledge. Only sending and receiving data when you’re aware of it can improve your phone’s security.

Automatic Software Updates
It’s important that you update your apps whenever a fix is released — or you might compromise your phone’s security. Once a manufacturer or carrier approves and sends out an update, Nougat automatically updates your phone — without you having to do anything about it.

New and Improved System Backup and Restore
It’s an important part of a security package that you can restore your files to the state they were in before a hack or security breach. Android’s backup and restore system on 7.0 delivers. You can link your phone to your Google account and then restore your device’s settings, including accessibility and app permissions, whenever you link it to a new device.

Trusted Face
This new and improved feature lets you unlock your system by adding a picture of your face to unlock it. Older systems had this feature, as well, but Nougat recognizes your face in different lighting conditions and when you make changes to your appearance, like putting on glasses.

Folder-Specific App Access
In the new system, you can allow apps to access only specific folders on your operating system, rather than the entire system. That means that apps won’t be able to gain access to sensitive or private materials.

Even with a new operating system with updated security protections, you still need the security features PSafe Total provides. PSafe’s Antivirus feature keeps your phone protected from invaders 24 hours a day by constantly scanning your SD card and phone files for breaches. You need PSafe, even on your Android 7.0 Nougat.

Google’s Onscreen Security Notifications for Android

PSafe Newsroom — Wed, 21 Sep 2016 20:50:08 +0000

Google already has a bunch of amazing tools and protections in place for Android users. Now, it has added a heightened level of security. In August 2016, Google announced that it would be offering a new feature for Android users: onscreen security notifications. Read on to learn more about these new security notifications and how you add them to your accounts.

What kinds of notifications will I receive?
When a new device is added to your Google account, you’ll get a notification in your mobile device’s home screen telling you about it. Additionally, you’ll start getting notifications about suspicious account activity on the same screen. If you agree that the activity looks suspicious, you can review it by clicking on “Review Account Activity” directly from the notification. Here, you can see what device was added to your account and where it was added. The alerts will be sent out in real-time because there’s no time to waste if your Google accounts have been compromised. If you don’t recognize the device or location, you can protect your phone and accounts by changing your password. If the new addition is familiar to you, you can simply dismiss the notification.

What’s the change?
Before, instead of getting an update directly on your phone, Google would send a message to your email account. Google decided to add the notifications directly to the phone’s main screen because the company thought that the email messages were being ignored. Google says with its updated alert type — called a native alert — users will be four times more likely to look at the device’s log-in information.

How do I start adding these updates to my phone?
You don’t have to do anything to start getting these alerts from Google. Whenever you sign into your Google account on an unfamiliar device in a strange location, you’ll get an onscreen notification. The system is particularly helpful in protecting your accounts when paired with Google’s two-factor authentications for your Android devices.

If you want to have complete security on your Android phone, make sure you’ve downloaded PSafe Total. PSafe’s Antivirus protection fixes security breaches automatically by scanning your phone files and SD card at all hours. For full phone security, keep your eye on your Google security updates and add PSafe protection.