Phones Canada is alerting its readers about the latest version of the XLoader malware, also known as MoqHao, which is currently circulating. This malicious software has been detected in various countries, including the U.S., U.K., Germany, France, Japan, South Korea, and Taiwan. The malware spreads through SMS text messages containing a shortened URL link, allowing XLoader to activate immediately upon installation. Once installed, the malware operates discreetly in the background while stealing personal data.

According to McAfee, the malicious activity of this app begins automatically once it is installed. McAfee has reported this technique to Google, who is actively working on implementing measures to prevent this type of auto-execution in future versions of Android.

The XLoader malware sends out fake permission requests disguised as Google Chrome notifications. These requests ask for permission to send and view SMS messages, run “Chrome” in the background, and even make “Chrome” the default SMS app. Once granted these permissions, the malware can access and send photos, texts, contacts, and hardware information (including your phone’s unique IMEI number) to a control server.

McAfee warns that this new version of XLoader requires minimal interaction from the victim, making it even more dangerous than its predecessor. However, there is some relief as Android devices with Google Play Services are shielded from such attacks by default through Google Play Protect.

It is crucial to remember some key points highlighted by Phones Canada:

– Avoid clicking on shortened URLs received in messages.
– Refrain from sideloading apps onto your device.

Stay vigilant and prioritize your mobile device’s security to protect yourself from potential threats like XLoader.