Urgent warning to Android users over two apps secretly sending your data to China – delete them now… – The US Sun

SECURITY researchers have discovered two malicious applications which have over 1.5 million downloads on Google Play – have you checked your phone?

Android users have been warned of a potential security breach which could see your personal data sent to Chinese servers.

Though the malicious applications have been reported to Google Play, they are still available to download.

The two apps are called “File Recovery & Data Recovery” and “File Manager” – and both are produced by developer Wang.Tom.

The apps collect sensitive and private data from users, including contact lists, connected email accounts, and social networks – and sends them to Chinese databases.

They also extract the following data: pictures, audio and video used within the applications, user location, country code, network provider name, and information about the operating system of your device.

Investigators discovered the apps hide their home screen icons to make it more difficult to remove from your device.

Android owners are recommended to check reviews of apps before downloading, and only get apps from reputable developers.

If you’ve downloaded these dangerous apps, be sure to delete them as soon as possible.

Earlier this year, Android users were also warned of four red flags to never ignore on their device.

Cyber-experts have told The Sun that there are important warning signs you need to check for when downloading any app.

Grant, who is COO off cyber firm MIRACL, gave The Sun four tips for using Android apps safely.

“Rule number one when downloading popular apps from the Google Play Store is check the download count,” Grant told The Sun.

Checking permissions requested by applications after downloads is also vital, Grant said.

Read the descriptions as well – if a description is written in bad English, seems bot-like or is formatted oddly, it’s most likely a fake, he said.

Grant warned: “You should also look carefully at the developer of the app, particularly for finance apps.

“Make sure the developer is legitimately a financial institution.”