Malware “disguised” by the Correos app tracks users of Android devices.
If you get one these days Allegedly a message from the post office that a package is waiting for youit is very likely that it is a attempted attack with malware targeting your Android device.
This has since been noted Malware Hunter Teamwhere they repeated this malware campaign that attackers are trying to trick users into believing they need it Download an app on their devices to be able to track a shipment from Correos.
Because of this fake post office app, malware is on its way to your Android phone
As seen in the image shared by the researchers, the message addressed to users includes a delivery receipt number and the State Correos y Telégrafos Society logo. A button appears directly below that indicates the option of Download an app to be able to follow the alleged broadcast along with some Instructions for installing the APK file Enabling installation from unknown sources – this is the first clue that should lead us to believe that this is bogus news as the official post office application is available on Google Play -.
After analyzing the application package, it is determined to be an a Variant of an already popular malware among cybersecurity experts, commonly known as Android / Spams.F.
Hence it is known that after installing the application will request the necessary permits to access information like Call or message historyor read the contacts saved in the phonebook. With that in mind, it cannot be ruled out that the malicious application should be used with the target Capture confirmation SMS that allow attackers to obtain Access codes to private banking services.
As always, the best you can do in such a situation is Ignore messages They come from untrustworthy sources – services like Gmail are very likely to identify emails of this type as malicious – and most importantly Avoid downloading apps from sources outside of Google Play. If this is not possible, remember that you can always resort to safe alternatives to the Google Play Store.