Android App Caught Stealing User Photos and Videos
Security Update : Google has removed an Android app from the Play Store after security researchers from Symantec noticed the app was secretly scanning and stealing personal photos and videos from user devices.
The app’s name is HTML Source Code Viewer and it was developed by a developer named Sunuba Gaming. At the time Google removed it, the app had between 1,000 and 5,000 installs.
The app’s name is self-explanatory, and it allowed users to view the source code of a Web page. Users only had to enter a URL, and the app retrieved that site’s source code and printed it on the screen.
According to Symantec, the app did a little more than that. They say that HTML Source Code Viewer contained code that scanned the local “/DCIM/Camera” and “/DCIM/100LGDSC/” folders, the standard location on Android devices for storing images and videos.
The app then took all the data it foun… (read more)