Pakistan’s Cabinet Division issued a critical cybersecurity advisory this week, urging government officials to be cautious of malicious apps lurking on the Google Play Store.
These seemingly harmless apps, with names like “ISSB App for Armed Forces” and “Electricity Bill Checker,” are designed to steal sensitive data without user consent. According to the advisory, the apps can siphon off personal and financial information, including media files, contact lists, calendar entries, call logs, and even message history.
The advisory further reveals that some apps take their data theft a step further, offering to sell personal details of Pakistani citizens for a fee. ITAppCoding (itappcoding28@gmail.com) is identified as the developer behind these suspicious apps.
The Cabinet Division emphasizes the importance of vigilance when downloading apps. The advisory recommends:
- Sticking to official app stores: Download apps only from trusted sources like the Google Play Store and avoid third-party hosting sites.
- Scrutinizing app details: Read reviews and privacy policies before downloading to understand the app’s functionality and data collection practices.
- Being wary of permissions: Be cautious of apps requesting unnecessary access to phone numbers, email addresses, or other sensitive information.
- Monitoring installed apps: Regularly review the permissions granted to installed apps and remove suspicious ones immediately.
The advisory offers additional security tips, including:
- Understanding data collection: Read app privacy policies to know what data is collected and shared.
- Keeping software updated: Ensure your phone’s operating system and apps are updated with the latest security patches.
- Avoiding suspicious emails: Don’t open emails or attachments from unknown or untrusted sources.
- Protecting official data: Avoid storing sensitive work information on personal smartphones.
- Using strong passwords: Utilize strong passwords for increased security.
- Employing antivirus software: Install reputable antivirus and anti-malware software for added protection.
By following these guidelines, Pakistani officials and the public can minimize the risk of falling victim to these malicious apps and safeguard their sensitive information from data breaches and cyber threats.
