Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Save Me App on Google Play is actually SocialPath malware


  • Please log in to reply
7 replies to this topic

#1 NickAu

NickAu

    Bleepin' Fish Doctor


  • Moderator
  • 13,563 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1 Australia
  • Local time:03:40 PM

Posted 07 January 2015 - 09:35 PM

Today, privacy tools are of increased importance. They help people understand what kind of data they’re sharing and can help keep your personal information personal. So it’s particularly egregious when a piece of malware pretends to protect a person’s privacy and, instead, steals their data. SocialPath-spamLookout recently discovered SocialPath, a piece of malware that advertises itself as an online reputation management tool. It claims that it will alert its users any time their photo is uploaded somewhere on the Internet. Instead, it steals the victim’s data.

 

https://blog.lookout.com/blog/2015/01/06/socialpath/



BC AdBot (Login to Remove)

 


#2 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 35,775 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:09:40 PM

Posted 07 January 2015 - 10:03 PM

Interesting that the app is not even what was allegedly the original incarnation: http://www.khou.com/story/news/local/2014/09/10/12-year-old-boy-invents-new-save-me-app/15427077/

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+

#3 mralias518

mralias518

  • Members
  • 135 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:40 AM

Posted 07 January 2015 - 10:42 PM

I must be missing something here. Are both of you talking about two different programs? I looked at the article and the video and I swear they are talking about two different software apps. The article talks about "Social Path"  (this one I think is the malware) a program that is suppose to protect you if someone uploads your image and a few other things yet shows a picture of Show Me which is a tracking program that you can use to keep an eye on your kids. My brother uses that one and it works pretty good. So again I say what am I missing here.


Linux Mint 17.1 Rebecca & Windows 8.1 Dual Boot.

Dell E6410 i5 7.60518 Gib of ram

 


#4 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 35,775 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:09:40 PM

Posted 07 January 2015 - 11:42 PM

You're not missing anything. I Googled 'Save Me android app' and the first hit was the article I linked to above. Which now I see is a completely different app. Since I didn't see the Google play depiction in the article, I assumed the app had been compromised. Classic case of two apps, same name completely unrelated.

This is the app that I mistakenly identified. Which is not the malware app NickAu reports.

https://play.google.com/store/apps/details?id=com.yoapp.savemepro

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+

#5 mralias518

mralias518

  • Members
  • 135 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:40 AM

Posted 08 January 2015 - 07:57 AM

Thank you for clarifying that. Didn't want to call my brother and say "hey, your know that app you were telling me about that you use, well you have been compromised" Still, scary stuff when they do that. Thanks for the heads up. 

 

FYI the article is all about "Social Path" but the image they attached is "Show Me" app. Lookout.com should change that picture as it is misleading. 


Linux Mint 17.1 Rebecca & Windows 8.1 Dual Boot.

Dell E6410 i5 7.60518 Gib of ram

 


#6 NickAu

NickAu

    Bleepin' Fish Doctor

  • Topic Starter

  • Moderator
  • 13,563 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1 Australia
  • Local time:03:40 PM

Posted 08 January 2015 - 07:03 PM

 

but the image they attached is "Show Me" app

 

The image they display is SaveMe app.

 

image-1024x657.png


Edited by NickAu, 08 January 2015 - 07:04 PM.


#7 mralias518

mralias518

  • Members
  • 135 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:40 AM

Posted 08 January 2015 - 08:17 PM

 

 

but the image they attached is "Show Me" app

 

The image they display is SaveMe app.

 

image-1024x657.png

 

 

Right that's what I mean. First day with my new fingers.


Linux Mint 17.1 Rebecca & Windows 8.1 Dual Boot.

Dell E6410 i5 7.60518 Gib of ram

 


#8 NickAu

NickAu

    Bleepin' Fish Doctor

  • Topic Starter

  • Moderator
  • 13,563 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1 Australia
  • Local time:03:40 PM

Posted 08 January 2015 - 08:44 PM

 

FYI the article is all about "Social Path" but the image they attached is "Show Me" app. Lookout.com should change that picture as it is misleading.

 

Just to clear thing up a bit, 

 

The Save Me app claims to be able to save a user’s contacts and – coming soon – other data including photos and videos, in the event that a mobile device is lost or stolen, according to mobile security vendor Lookout.

However, it actually contains a variant of information-stealing malware ‘SocialPath’, the firm’s senior security product manager, Jeremy Linden explained in a blog post.

 

 

 

Think of it this way, Remember Typhoid Mary? It would have been pointless to show images of Typhoid, When Mary was the person to avoid, So an image of her was more appropriate.

 

Showing an image of Social Path code is pointless, Because people will be looking at the Save Me app and downloading and installing it, And by avoiding SaveMe they avoid SocialPath. In this case.

 

Typhoid Mary - Wikipedia, the free encyclopedia


Edited by NickAu, 08 January 2015 - 10:04 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users