Be careful with the apps you download to Android devices!
Android It goes without saying how widespread smartphones and devices are in the world.. It is clear that 95% of the mobile phones that we all have are either iOS or Android.. Although technology is advancing at great speed and smartphone sales, which are increasing unstoppably, are out of the preferences of some people, usually one of the 2 operating systems is preferred by people.. The fact that the iOS operating system developed by Apple, which only it has the right to use, is much more reliable than Android devices and never allows to install applications from outside, plays an active role in ensuring that the devices are more guaranteed in many respects and that the device user is better protected.
Android, on the other hand, even though it claims to increase reliability more with the new Android 9 version, which is the opposite, as Google also stated and warned on its devices, “installing applications from outside, Playing with millions of applications” Due to the reasons of “no store control”, installing all kinds of malware on the devices can make access to the devices possible by cyber attackers.. The reason is that malicious people, who take advantage of some rights that devices offer to users, access devices by using some of these vulnerabilities and steal users’ information, as well as actively using these device features in their favor, sometimes resulting in mining from devices.. Sometimes it is a completely meaningless application, and sometimes it may be possible for the applications that we will give examples of, to remotely mine using your device or to access the information on your entire device with your cryptocurrency exchange information.*
More than 206,000. This game/app, which has many reviews, is referred to as the Bitcoin game, and it is an application that contains some advertisements and allows some optional purchases within the application.. So this app already offers options to make money, why would it threaten us by using our device? You may be thinking. Again, this is not about you, it is because the Google Play Store is not audited frequently and well enough by Google. many apps contain worse codes than these and can put users’ devices/money at risk.
If we look at the permissions requested by the Bitcoin Billionaire game;
Photos/Media Contents/Files
- Control of photos, media and content
- Changing and deleting this and similar information in the internal memory
Storage
- Memory reading (internal and SD memory)
- Changing and deleting information in memory
Wireless connection information
- View Wi-Fi connections
Other
- Downloading data over the Internet
- Checking network connections
- Uninterrupted/full network/internet access
- Run application as soon as device boots up
- Vibration on and off management
- Prevent device from going to sleep
Looking at these permissions, it is possible to see that they all control almost the entire device.. While the Facebook application may be asking for more permissions on the device, anyone who knows a little about operating systems and cybersecurity can guess what these permissions, which are in the hands of the developers of these applications, can cause in just a single game.. Let’s explain for those who can’t.
The simplest of these access permissions, if the application uses the device, cloud mining or other malicious mining and similar devices can cause mining through the device by using the information and power.. “Run the application as soon as the device is turned on” feature means that this application will work again as soon as you turn your phone off after you turn off the application and your device.. What does it mean? The answer to the question is that the application can operate without your knowledge and use your device maliciously, even if you want it or not. These permissions may download malicious files in the background and cause some malicious software on your device other than the applications you download from the Play Store, which can make it very difficult to even guess what such malicious applications may cause.
Again, this permission can be used maliciously, even if the application may be required to “control network connections and internet access” to broadcast advertisements in the game and to ensure that some other save records are on the servers.. How will it be used? The answer to your question is very simple. This or other malicious application, which is given full internet access, may use the device’s internet to use the device’s internet on your device, even while you are sleeping, 24 hours a day, causing the photos, media files and all other files on your device to be uploaded to the server of the application’s producer, and every photo of the Google Photos application will be automatically opened whether you open the application or not. You can understand from the backup to the counter servers.. Even though these applications may have the purpose of stealing such data, their purpose is more like cryptocurrency mining and many different examples and malicious applications/games have been revealed before.
The Crypto Games: Bitcoin Tycoon
This app/game was developed by a Russian-based developer.. Why Russia? The answer to this question is already a cause for concern, as many crypto attacks are based in Russia and malware targeting cryptocurrencies based in Russia is breaking records.. “Why can’t Russian developers develop cryptocurrency games?” It may also come to the fore to ask the question. Even if it is okay to ask this question, we are sure that the Russian factor is mentioned here, and we are sure that people who have knowledge about cryptocurrencies and have real knowledge about the crypto money industry understand what we mean.
For those who do not understand, an application and its permissions. Let’s write what can happen.
When we look at the permissions requested by The Crypto Games: Bitcoin Tycoon application;
Photos/Media Contents/Files
- Controlling photos, media and content
- Changing and deleting this and similar information in the internal memory
Storage
- Memory reading (internal and SD memory)
- Changing and deleting information in memory
Wireless connection information
- View Wi-Fi connections
Other
- Downloading data over the Internet
- Checking network connections
- Uninterrupted/full network/internet access
- Prevent device from going to sleep
It is possible to see 9 different permissions requested. With these 9 different permissions, it is more risky than the fact that this application will be able to access many crypto money mining, collecting information about other applications on the device, if you accept the exchange of files on the device and you can play a game in the background on your device thanks to the internet access permission by the application (this is a game). It is possible to install apps targeting information from your different malicious cryptocurrency mining and cryptocurrency exchange apps by downloading the in-house update. Is this not possible in other applications? Although it is possible, it is much more risky in this and similar applications, and especially in Play Store applications and games installed in Russia.
Free Bitcoin
<
This game, which has more than 53 thousand reviews, claims to give you “crypto money” for free.. If we want to examine this claim before moving on to the malicious aspect of the application, it is possible to see the comments of “they never pay your money, they have not paid my money yet, they want 10 cents for 1 cent” by Turkish commentators in the first 5 comments of the application.. “Brother, why are these people downloading these apps, why shouldn’t they?. Do they think that by seeing the comments and knowingly they will be given free coins by the app!?” We are sure that the number of those who think that there will be many. It’s sad but true to know they’re downloading worse apps than this. Although there are many complaints about the application called Free Bitcoin, there are as many European-based comments as the number of those claiming to be a fraudulent application, claiming to be real and claiming to receive money.. When we look at the comments made in Turkish among these comments;
It is possible to see these comments.. The fact that everyone but one commenter gave 1 star suggests that this app is not actually a real free Bitcoin giving app, but may be a maliciously crafted app using users’ devices.. The app still gets the classic permissions and gets full network access and file permissions. This means that the permissions of the mobile device that can cause crypto currency mining and unauthorized changes to the device are sufficient.**
For some reason, Russia-based application: Bitcoin mining: Life simulator, rich businessman
Again, this app is specially developed by a Russian developer. The application, which is translated into Turkish as ‘Bitcoin mining: Life simulator, rich businessman’, is called a ‘Bitcoin mining game’, apart from the Russian-based development of the application, which brings the ‘mining fraud’ claim to mind once again.. Even if your main goal in the game is to earn much more by mining, the game contains ads and according to what users write, you have to see exactly 5 in-game ads every 5 minutes.. These advertisements are both advertisements coming from the internet and advertisements redirecting to web addresses placed between the codes of the game, while the suspicion of crypto currency fraud is extremely high.
- Internet retrieve data
- view network connections
- full network access
- prevent device from sleeping
- set alarm
- See Google service configuration
The application that asks for permissions and does not open without these permissions has these permissions It is very possible to earn money using your device thanks to. These permissions, up to setting an alarm on the device, are large enough to cause downloading data to the device in the background and using the internet access on the device for fraudulent mining purposes.
Bitcoin Mining – Cryptocurrency, Bitcoin, Tap Game
This application, which is based in India, seems extremely reliable.. Why is this only asking for internet access while others are asking for dozens of permissions, is this risk-free? The answer to his question is, of course, that it can be risky, but compared to others, malware cannot download, almost no access to your files and other applications, unless you give permission to the device.. It can only redirect you to malicious sites with ads. But it is easy to see that it is extremely reliable compared to the others.
Russia is waving to us again: Forex Game
Including a Russian-based developer’s Bitcoin This application, called “Forex Game” developed by the company, can be downloaded from your device;
Photos/Media Contents/Files
- Control of photos, media and content
- Changing and deleting this and similar information in the internal memory
Storage
- Memory reading (internal and SD memory)
- Changing and deleting information in memory
Wireless connection information
- Display Wi-Fi connections
Other
- Downloading data over the Internet
- Checking network connections
- Uninterrupted/full network/internet access
- Ci prevent pleasure from sleeping
- See Google service scheduling
Requests their permissions and the app’s main purpose is not a game. As can be understood from the name of the application, which is claimed to bring earnings outside of cryptocurrencies or other crypto currency exchanges, it is in a view that allows you to test your knowledge on Forex markets with artificial currencies and prepares you to earn more.. The application, which has been downloaded more than 1 million times and has 803 reviews in Turkey, is an application that you are subject to extensive permissions to do crypto money mining using the power of your device, from downloading malicious software to your device.
This application was developed based in Russia. may also mean that a Russian-based developer has previously waved to the users that it will attract to its own network.
Bitcoin Miner: Clicker Game
New York/ This application, which was developed in the USA, poses a great danger in itself.. The application called Bitcoin Miner: Clicker Game, which has been downloaded more than 1,000 times, shows itself as a mining game and says, “push and start mining”, with an image scene, no different from jackpot games.
Let’s come to the permissions it wants and When we evaluate these permissions, it is clear;
This application has access to: Device and application history
- Viewing installed applications!
ID
- Authority to find all accounts (including Facebook account and all other accounts registered in the accounts section) on the device
Contacts
- Read contacts from device directory
Photos/Media Contents/Files
- Read the contents of your USB stick
- Change or delete the contents of your USB stick
Storage
- Read the contents of your USB stick
- Change or delete the contents of your USB stick
Other
- Getting data from the Internet
- viewing network connections
- full network access
- control vibration
- prevent device from going to sleep
- Google Play license check
This To what extent does it make sense to grant permissions? This is a game why does it want to check my account information and contacts? Even if you thought, imagine that a child installs this app on your device, not you.. The application itself is already a big risk.
This application, which has the authority to view all the accounts on your device, can see all your e-mail addresses and user names installed on the device.. Apart from these, the application can collect information about all applications, including your crypto wallet or similar crypto money exchange applications installed on the device, and can see the names of these applications.. What are you trying to tell? Some may say, let’s explain.
Let’s assume that you are using an exchange called X on your device thanks to these 2 permissions, and let’s assume that you have an account on this exchange.. The application has been created in a way that will immediately understand that you are using that exchange.. “You know, what’s going to happen?” Those who say should not immediately think positively.. Because the application is almost screaming because it was created to steal your information.
The application can see all the mail accounts on your device, including the account you entered in this crypto money exchange application, thanks to the “view accounts” authority given by you.. In this way, you are clearly the number one target of attackers, as application developers can easily find your e-mail address and information on the other device and passwords you use frequently.. It’s not that hard to understand. The application already gives the message that it clearly wants all the information and poses a big risk if you check the permissions before installing it to you.
Bitcoin Tycoon game
This application, which does not officially write that it was developed in China and does not provide information about the developer, asks for your name and your friend’s name as soon as it is opened.. The application has been downloaded by more than 1,000 people and works on all devices with Android 2.3 and above, but just because this application works on devices with such an old version does not mean that its main purpose is for everyone to play.. As a reason, the application actually wants to be downloaded to all devices and to be on as many devices as possible.
The permissions requested by the game are as follows;
Phone
- read phone status and ID
Photos/Media Contents/Files
- Read contents of your USB stick
- Modifying or deleting the contents of your USB stick
Storage
- Read the contents of your USB stick
- modify or delete its content
Wireless connection information
- View Wi-Fi connections
Device ID and call information
- read phone status and ID and display call information
Other
- network view connections
- full network access permission
An application that can see your mobile phone number when you look at the application and have information about the calls on your device.. It is also within the scope that the application may have the authority to read the SMS that will come to your device with the updates or with some permissions.. The potential risk underlying this application is that the information on your device is stolen, and by using this information, your accounts can be compromised by using the password reset techniques of crypto currency exchanges, thanks to “phone number and SMS”, and that the application in the background may cause many different malware on your device with different applications.
Be very careful with applications and games
It is possible to see dozens of different applications that require this and more permissions, that these applications and games are often installed on devices by people who are cryptocurrency enthusiasts, and they People who actively use cryptocurrency exchange information and applications, most of which they use on their devices. For this reason, for all the information on your device and for your own safety, staying away from these and similar applications and games as much as possible may cause you to be the target of possible cyber attacks and with your own hands, your money, which you will not see again for life, may disappear.. Are these measures alone enough to prevent this from happening? Insufficient. But the more you are protected from exposure and the more you avoid risking yourself, the more you will be protected, so it is necessary to stay away from these and similar applications, and to make sure that your children do not install this and similar applications on your device.
* Evaluations about these applications have been made depending on many different factors and do not give any definite information about what they can do or do.. It is just a warning that it carries risk.
**The screenshot used is publicly taken from Google Play Store.