Menu
A surge of Pokemon Go-related apps is out to steal your data

A surge of Pokemon Go-related apps is out to steal your data

A throng of unofficial apps has tried to piggyback on the title’s success

Privacy fears about the Pokemon Go app have been largely addressed, but dozens of other apps that piggy back on the popular game have raised further concerns.

Since the game launched last week, a swarm of unofficial apps has emerged and is trying to capitalize on the title’s success. And many are hungry for your personal data.

These unofficial apps have been offering cheats, tips and even songs from the hit game. But in exchange, they demand permission to access sensitive data on your phone, said Chad Salisbury, a security engineer with RiskIQ, which monitors mobile malware.

If permission is granted, the apps can collect contacts lists, photos and even login credentials to social media accounts. They can even take control of a phone’s camera and microphone.

RiskIQ has detected 172 unofficial Pokemon Go-related apps. Salisbury estimated that over half of them suspiciously gather more user information than they need.

Any data collected could be traded for profit. A developer could sell it to legitimate marketing firms or on the black market, he warned.

Salisbury found an app called “Fake GPS for Pokemon Go” on the Google Play Store that essentially allows a player to cheat. But the app also asks for permission to send SMS text messages.

In a worst case scenario, the app could secretly shoot off SMS messages to a premium rate number, generating money for the developers.

It’s no surprise if unscrupulous people are trying to cash-in on the Pokemon Go craze. Hit mobile games usually result in copycat titles, some of which carry Trojans. Hackers have also been known to clone legitimate banking apps and use them to trick users in handing over their data.

In the case of Pokemon Go, users who download the unofficial apps are likely unaware that they may be handing over access to sensitive data, Salisbury said. They may think products like the Pokemon Go music player are harmless.

“Who doesn’t want to listen to the Pokemon Go theme song?” he said. But users should be watchful over the permissions the apps ask for. 

Fifty-seven of these unofficial Pokemon Go apps were found on AppBrain, a third-party Android market. Others were found on Google Play and Apple’s App Store. 


Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Featured

Slideshows

Sizing up the NZ security spectrum - Where's the channel sweet spot?

Sizing up the NZ security spectrum - Where's the channel sweet spot?

From new extortion schemes, outside threats and rising cyber attacks, the art of securing the enterprise has seldom been so complex or challenging. With distance no longer a viable defence, Kiwi businesses are fighting to stay ahead of the security curve. In total, 28 per cent of local businesses faced a cyber attack last year, with the number in New Zealand set to rise in 2017. Yet amidst the sensationalism, media headlines and ongoing high profile breaches, confusion floods the channel, as partners seek strategic methods to combat rising sophistication from attackers. In sizing up the security spectrum, this Reseller News roundtable - in association with F5 Networks, Kaspersky Lab, Tech Data, Sophos and SonicWall - assessed where the channel sweet spot is within the New Zealand channel. Photos by Maria Stefina.

Sizing up the NZ security spectrum - Where's the channel sweet spot?
Kiwi channel comes together for another round of After Hours

Kiwi channel comes together for another round of After Hours

The channel came together for another round of After Hours, with a bumper crowd of distributors, vendors and partners descending on The Jefferson in Auckland. Photos by Maria Stefina.​

Kiwi channel comes together for another round of After Hours
Consegna comes to town with AWS cloud offerings launch in Auckland

Consegna comes to town with AWS cloud offerings launch in Auckland

Emerging start-up Consegna has officially launched its cloud offerings in the New Zealand market, through a kick-off event held at Seafarers Building in Auckland.​ Founded in June 2016, the Auckland-based business is backed by AWS and supported by a global team of cloud specialists, leveraging global managed services partnerships with Rackspace locally.

Consegna comes to town with AWS cloud offerings launch in Auckland
Show Comments