Categories: Malware

Android Mobile Antivirus App Collecting User Data Without Device Owner’s Permission

To keep our personal data safe we use Antivirus, but what results if the Antivirus solution can’t be trusted. Security experts form Check Point discovered a Mobile antivirus DU Antivirus Security collecting user information without their permission.

According to google play store data, this app downloaded between 10 and 50 million times and have a good review from users.

Checkpoint researchers said the app collects information from the device including call logs, Contacts, unique identifiers and even the location of the device. Then this information is encrypted and transferred to a remote server maintained by DU.
AntivirusAntivirus
Image: Checkpoint

Apps that Present in Play store with harmful codes 

So what are they doing with the collected information?, they do have another one app(Caller ID & Call Block – DU Caller) which provides caller details and to block calls.All the collected data are utilized with this app.

Also Read Mobile spyware that steals Twitter credentials uses sandbox to Evade detection

The purpose of an Antivirus is to protect the user data but DU Antivirus acts vice versa. Checkpoint security experts reported the app to google and it was taken down by 24, 2017.Along with DU Antivirus, they found other 30 apps with similar behavior and 12 of them from play store.

Mobile antivirus shows legitimate reasons to request additional permissions, such apps should be avoided, By having it is an advantage fraudster will abuse resources. Users are strongly advised to use security solutions from the reputed provider.

com.power.core.setting
com.friendivity.biohazard.mobo
com.energyprotector.tool
com.power.core.message
batterysaver.cleaner.speedbooster.taskkiller.phonecooler
com.rammanager.pro
com.memoryanalysis.speedbooster
com.whosthat.callerid
speedbooster.memorycleaner.phonecleaner.phonecooler
com.example.demos
com.android.fb
antivirus.mobilesecurity.antivirusfree.antivirusandroid
speedtest.networksecurity.internetbooster
com.ramreleaser.speedbooster
com.dianxinos.optimizer.duplay
com.coolkeeper.instacooler
com.memoryreleaser.booster
com.freepopularhotvideo.hotube

           Apps that Present outside of Play store with harmful codes 

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Gunra Ransomware’s Double‑Extortion Playbook and Global Impact

Gunra Ransomware, has surfaced as a formidable threat in April 2025, targeting Windows systems across…

43 minutes ago

Hackers Exploit 21 Apps to Take Full Control of E-Commerce Servers

Cybersecurity firm Sansec has uncovered a sophisticated supply chain attack that has compromised 21 popular…

52 minutes ago

Hackers Target HR Departments With Fake Resumes to Spread More_eggs Malware

The financially motivated threat group Venom Spider, also tracked as TA4557, has shifted its focus…

1 hour ago

RomCom RAT Targets UK Organizations Through Compromised Customer Feedback Portals

The Russian-based threat group RomCom, also known as Storm-0978, Tropical Scorpius, and Void Rabisu, has…

1 hour ago

Hackers Use Pahalgam Attack-Themed Decoys to Target Indian Government Officials

The Seqrite Labs APT team has uncovered a sophisticated cyber campaign by the Pakistan-linked Transparent…

1 hour ago

LUMMAC.V2 Stealer Uses ClickFix Technique to Deceive Users into Executing Malicious Commands

The LUMMAC.V2 infostealer malware, also known as Lumma or Lummastealer, has emerged as a significant…

1 hour ago