iRecorder – Screen Recorder was a legit Android app available for download from Google Play store. Its purpose is clear from its name. Until August 2022, all it did was make you screen record. But with an update, iRecorder has turned into a spying tool. The app started recording audio data every 15 minutes using the microphone. It also turns out that the developer also allows you to download certain types of files from your phone.
ESET researchers removed the app from the Play Store after discovering these features. But it may still be installed on your phone or tablet. That’s why we recommend that you delete it as soon as possible. ESET researchers said in a blog post that it’s very rare for a developer to install a legitimate app and then update it with malicious code a year later.
The developer released iRecorder in September 2021. It included malicious code in the software in August and managed to evade security controls. ESET states that the August 2022 update was made using AhMyth Android RAT (remote access Trojan).
After the update, iRecorder kept its original features. But it also gained the ability to record audio from the microphone and send files to the command and control server. The application also scanned various types of files such as saved web pages, images, audio, video and documents and uploaded them to its servers.
When we look at it, iRecorder has been downloaded 50,000 times on PlayStore. It is not yet clear who the target audience is. If you still have iRecorder installed on your phone or tablet, you should delete it immediately.
54405
