The popular screen recording application collects information about its user and sends it to the administrator of the malware.
Trojan malware is introduced to the device as part of another application. lumerb / Alamy Stock Photo
Slovakian cyber security company ESET warns iRecorder – Screen Recorder from the screen recording application. The application has been available for android users.
According to ESET, the application in question runs malware in the background of normal use without the user noticing. The application records a minute-long audio clip every 15 minutes. In addition, the application collects data from phone files and the web browser.
The application sends the collected data to the malware administrator.
Malware came later
The malware infiltrated the application a year after its release. So the application has not always contained malware. ESET estimates that the malware slipped into the application as part of version 1.3.8. update released in August 2022.
– It is rare that an application developer releases a clean application and updates it with malware a year after its release, ESET says in its blog.
The malware is named Ahrat. The malware originates from Ahmyth’s open-source Android remote access trojan.
A Trojan is a malicious program that travels along with another application like the Trojan horse known from Greek mythology.
The application containing the malware has been downloaded from the Google app store more than 50,000 times. The application has been removed from the application store list.