Menu
A surge of Pokemon Go-related apps is out to steal your data

A surge of Pokemon Go-related apps is out to steal your data

A throng of unofficial apps has tried to piggyback on the title’s success

Privacy fears about the Pokemon Go app have been largely addressed, but dozens of other apps that piggy back on the popular game have raised further concerns.

Since the game launched last week, a swarm of unofficial apps has emerged and is trying to capitalize on the title’s success. And many are hungry for your personal data.

These unofficial apps have been offering cheats, tips and even songs from the hit game. But in exchange, they demand permission to access sensitive data on your phone, said Chad Salisbury, a security engineer with RiskIQ, which monitors mobile malware.

If permission is granted, the apps can collect contacts lists, photos and even login credentials to social media accounts. They can even take control of a phone’s camera and microphone.

RiskIQ has detected 172 unofficial Pokemon Go-related apps. Salisbury estimated that over half of them suspiciously gather more user information than they need.

Any data collected could be traded for profit. A developer could sell it to legitimate marketing firms or on the black market, he warned.

Salisbury found an app called “Fake GPS for Pokemon Go” on the Google Play Store that essentially allows a player to cheat. But the app also asks for permission to send SMS text messages.

In a worst case scenario, the app could secretly shoot off SMS messages to a premium rate number, generating money for the developers.

It’s no surprise if unscrupulous people are trying to cash-in on the Pokemon Go craze. Hit mobile games usually result in copycat titles, some of which carry Trojans. Hackers have also been known to clone legitimate banking apps and use them to trick users in handing over their data.

In the case of Pokemon Go, users who download the unofficial apps are likely unaware that they may be handing over access to sensitive data, Salisbury said. They may think products like the Pokemon Go music player are harmless.

“Who doesn’t want to listen to the Pokemon Go theme song?” he said. But users should be watchful over the permissions the apps ask for. 

Fifty-seven of these unofficial Pokemon Go apps were found on AppBrain, a third-party Android market. Others were found on Google Play and Apple’s App Store. 

Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Slideshows

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise

Ingram Micro completed its nationwide roadshow in Auckland last month, kicking off its Innovation Hour series with Hewlett Packard Enterprise. Uncovering the latest in storage, networking and servers, the event outlined key market trends for resellers in 2016 and beyond.

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise
IN PICTURES: FireEye celebrates channel at 2016 Partner Conference

IN PICTURES: FireEye celebrates channel at 2016 Partner Conference

FireEye welcomed 143 channel partners and distributors to FireEye's 2016 annual Partner Conference, FireEye A/NZ Momentum - held at Establishment in Sydney. Delegates heard from senior trans-Tasman channel leaders, marketing and the product divisions in the morning, with FireEye customers, incident responders and threat intelligence analysts sharing knowledge during the afternoon.

IN PICTURES: FireEye celebrates channel at 2016 Partner Conference
Show Comments