3 ways to spot a malware-infected app on your smartphone

May 31, 2023 TH Author

Google recently removed a popular screen-recording app for Android known as iRecorder – Screen Recorder from the Play Store after it was revealed to be stealing information from users. The app debuted in the Play Store in 2021 and was seemingly harmless. However, an update in 2022 introduced malicious functionality to devices that downloaded the app.

The malware embedded into iRecorder allowed the app to access audio, media files, and webpages from the user’s phone. According to TechCrunch, the malware is called AhRat, an open-source remote access trojan that can access a user’s phone and is similar to spyware.

Also: Don’t get scammed by fake ChatGPT apps: Here’s what to look for

Users who downloaded iRecorder would allow the app to access their device’s microphone, photos, media, and files, which is not out of the ordinary for a screen-recording app. But with the malware that was embedded into the app, the user’s files were accessible to bad actors.

According to Lukas Stefanko, an ESET security researcher, it’s a rare occurrence that a developer submits an innocuous app to a mobile application store and then updates it with malware.

Also: Your phone contains your most personal information. Here’s how to keep it safe

But this phenomenon belongs to a category of malware called versioning, in which a developer submits a seemingly ordinary app to an application store, then later update it with malicious code. By versioning an app, shady developers can bypass an application marketplace’s app review process for longer.

If you’ve downloaded iRecorder, you should delete it immediately. If you suspect your smartphone has been infected with malware, here are some signs to look for.

1. Look for signs of slow performance

If your smartphone lags and constantly slows down, it might be infected with malware. Comb through your downloaded apps and ensure there are only apps you recognize. If you come across unfamiliar apps, delete them immediately.

2. Watch out for overheating

It’s normal for your phone to get warmer while it’s charging. But it’s not normal for your phone to get really hot when it’s not in use or unplugged.

Also: How to find and remove spyware from your phone

If your smartphone is constantly overheating, check for unfamiliar apps and settings, as malware that operates in the background can be a cause.

3. Check for decreased battery life

It’s normal for your phone’s battery life to decrease gradually over time. But if you’ve only had your smartphone for one year and you notice it’s not holding a charge, that could indicate a bigger problem.

When malware programs run in the background, they drain your battery significantly. If your battery drains quicker than usual, check for suspicious apps and high data usage.

Also: Scammers target older people online. Here are the 3 warning signs to watch for

If you can’t find any odd apps or any signs of malware, but your phone is still acting weird, back up your phone’s data, then consider a factory reset of your device. A factory reset will remove all your phone’s data, settings, and apps. This option is extreme and should be seen as a last resort, but it might be the best option if you can’t figure out what’s infecting your phone.