Beware of Android Screen Recorder App Spying and Stealing Data

Google has removed the "iRecorder - Screen Recorder" app from the Play Store after it was found to contain information stealing capabilities. The app, which had over 50,000 installations, was first uploaded in September 2021 and the malicious functionality was introduced in August 2022. The app was flagged as harboring the AhMyth trojan on October 28, 2022, indicating that the app managed to stay accessible all this time and even received a new update as recently as February 26, 2023. The app's malicious behavior involves extracting microphone recordings and harvesting files with specific extensions, pointing to a possible espionage motive. This is the latest example of malware adopting a technique called versioning to slip through the app review process.