In recent months, a new threat has been affecting thousands of Android users: an extremely dangerous malware called SpyLend. This malicious software has infiltrated Google Play, disguised as a financial app, and has been downloaded more than 100.000 times. Behind a false promise of fast and hassle-free loans, lies a program designed to steal personal data and extort their victims.
Although Google has removed this app from its official store, many people may still be at risk if they installed it before it was removed. Therefore, it is crucial to know how this malware operates, what information it steals, and what steps to take to avoid falling victim to this type of scam.
What is SpyLend and how does it work?
SpyLend is a type of malware categorized within the group known as SpyLoan, a set of fraudulent applications designed to impersonate legitimate financial services. The modus operandi of these programs is to attract users users with the promise of quick loans and with little documentation. Once the application is installed on the device, it requests excessive permissions, accessing sensitive information such as:
- Contacts and call logs.
- SMS messages, including bank verification codes.
- Photos, videos and documents stored on the device.
- Real-time location and IP address.
- Clipboard history, including copied passwords.
One of the most worrying aspects of SpyLend is its ability to modify personal photos from victims and use them to extort money. These types of intimidation tactics have been reported mainly in India, where the app targeted people looking for urgent loans.
How he managed to infiltrate Google Play
Despite strict security controls on Google Play, SpyLend managed to bypass the protection measures using advanced techniques. Instead of directly initiating suspicious behavior, the app redirected users to a external site where a malicious APK was downloaded. In addition, it only activated its malicious functions when it detected that the device was in certain geographic regions, making it difficult for Google to detect it.
La app Finance Simplified was the main front for SpyLend, although similar apps such as KreditPro, MoneyAPE, StashFur and PokketMe have also been identified. These apps have been removed from Google Play, but people who downloaded them before their removal are still at risk.
Information stolen by SpyLend
The main objective of SpyLend is to collect a wide range of data from infected devices, which are then used for blackmail, extortion or financial fraud. Below is the most important information that this malware can steal:
- Contact: Access the contact list to send threats and coerce victims.
- SMS and call logs: It can read text messages to intercept verification codes and gain access to bank accounts.
- Real time location: Monitors the user's exact position every few seconds.
- Personal files: Photos, videos and documents stored on the device can be manipulated to coerce victims.
The purpose of this data collection is to subject the users to blackmail, forcing them to pay exorbitant amounts of money under the threat of exposing sensitive information.
How to know if your mobile is infected
If you suspect that you may have downloaded SpyLend or a similar app, there are some symptom that may indicate an infection:
- Unexplained increase in battery and data consumption.
- Presence of unknown applications on the phone.
- Suspicious messages or calls in your history.
- Unusual access to your camera or microphone without your permission.
If you detect any of these signs, it is essential to act immediately to minimize damage. Additionally, it is important to regularly review the security of your device, so consider reading about the security measures taken by Google Play.
Steps to remove SpyLend from your device
If you think your phone has been infected by SpyLend, follow these steps to get rid of the malware:
- Delete the app manually from your phone settings.
- Revoke permissions of any suspicious apps in the settings.
- Change passwords from all your bank and personal accounts.
- Run a security scan with a reliable antivirus.
- Verify that Google Play Protect is activated on your device.
Prevention: How to avoid future infections
To protect your smartphone from this type of threats, follow these recommendations:
- Download apps only from official sources and check out other users' ratings.
- Always check the permissions an app requests before installing it.
- Keep your device updated to block security vulnerabilities.
- Use an antivirus and perform periodic scans.
- Be wary of apps that promise loans that are too easy or without any requirements.
SpyLend is a clear example of how malware can disguise itself as something seemingly harmless to deceive thousands of users. By impersonating loan apps, this malicious software has managed to infiltrate devices and steal sensitive information, causing serious problems for its victims.
The best way to protect yourself is to be informed, cautious and take appropriate security measures when installing new applications on your mobile. Share the information to alert other users about the issue.