ESET, a top-notch cybersecurity company from Slovakia, has discovered a tricky network of 18 sneaky loan apps, collectively known as “SpyLoan.” These apps, camouflaged as helpful financial services, have been snagged by users over 12 million times.
Their main target? Regions in Southeast Asia, Africa, and Latin America. Despite their innocent appearance, SpyLoan apps are not to be trusted, engaging in data theft, extortion, and blackmail.
SpyLoan apps didn’t sneak in through the front door. They spread through tricky channels like scam websites, third-party app stores, and, surprisingly, direct downloads from Google Play.
These seemingly friendly loan apps, waving attractive interest rates, are actually up to no good.
They slyly collect your personal and financial details. Once they have the info, they use it to blackmail and extort users. If that’s not enough, they resort to harassment to get their loans back. They even go so far as to threaten to share your personal photos and videos on social media.
The personal information these apps snatch for their mischief includes account lists, call logs, calendar events, device details, contact lists, location data, and text messages. They use this trove of data to harass and blackmail users, even intercepting sensitive info like one-time passwords (OTPs) or other financial data.
The following apps, which have been removed by Google, are listed below:
- 4S Cash (com.swefjjghs.weejteop)
- AA Kredit: इंस्टेंट लोन ऐप (com.aa.kredit.android)
- Amor Cash: Préstamos Sin Buró (com.amorcash.credito.prestamo)
- Cartera grande (com.mxolp.postloan)
- Cashwow (com.cashwow.cow.eg)
- CrediBus Préstamos de crédito (com.dinero.profin.prestamo.credito.credit.credibus.loan.efectivo.cash)
- EasyCash (king.credit.ng)
- Finupp Lending (com.shuiyiwenhua.gl)
- Go Crédito – de confianza (com.mlo.xango)
- Instantáneo Préstamo (com.mmp.optima)
- Oro Préstamo – Efectivo rápido (com.app.lo.go)
- Préstamos De Crédito-YumiCash (com.loan.cash.credit.tala.prestmo.fast.branch.mextamo)
- PréstamosCrédito – GuayabaCash (com.guayaba.cash.okredito.mx.tala)
- Rápido Crédito (com.okey.prestamo)
- TrueNaira – Online Loan (com.truenaira.cashloan.moneycredit)
- ยืมด้วยความมั่นใจ – ยืมด่วน (com.flashloan.wsft)
- สินเชื่อปลอดภัย – สะดวก (com.sc.safe.credit)
So, next time you’re on the app store, think twice before clicking that download button. Cybersecurity is no joke, and these SpyLoan apps are proof of that. Stay vigilant, and keep your digital space secure.
Ever had a close encounter with a suspicious app? Share your stories in the comments below!
