Updated: February 10, 2021 11:46:34 am
A utility app by the name of Barcode Scanner was recently taken down from the Google Play Store. The app was found to contain malware and was downloaded over 10 million times from the official Google Play Store. While it has been taken down, users who have already installed the app on their phones may still be at risk.
According to a report by Nathan Collier, a security researcher at Malwarebytes, the app did what it advertised, allowing users to scan barcodes and obtain information. However, malicious code was found on a recent version of the app. This was discovered after the app started acting weird post-installation, and immediately began displaying adware and web redirects to potentially dangerous websites.
Collier also added that previous versions of the app did not feature the malicious code. The app was reportedly signed by the same digital certificate as previous versions, and came from the same developer ‘LavaBird LTD’.
“In the case of Barcode Scanner, malicious code had been added that was not in previous versions of the app. Furthermore, the added code used heavy obfuscation to avoid detection,” said Collier in the report.
Apps on Play Store with malicious code is not new
Malicious apps masquerading as utility tools to make themselves available on the Play Store is not new. Over the past few years, despite improved security measures and policies, a lot of apps that have malicious code often end up on the Play Store and it takes discovery to be made before the app can be taken down.
However, by that time, many people could already have the app on their phones, and damage could have already been done.
How to remove Barcode Scanner
Google still hasn’t made the app’s removal public and as of now has not used the Play Protect tool to notify people that they must get rid of the app. However, you can manually install the app yourself.
Navigate to the app settings in your Android phone, and check out the Barcode Scanning app that you have been using. If the app’s package name is ‘com [dot] qrcodescanner [dot] barcodescanner’, uninstall it to avoid any further damage.
For your barcode scanning needs, there are many alternative apps to consider, Additionally most phone brands these days offer barcode scanning as an in-built feature in the stock camera app or another scanning system itself. Check if your phone too already has the feature.
📣 The Indian Express is now on Telegram. Click here to join our channel (@indianexpress) and stay updated with the latest headlines