Huawei , Honor , and Vivo smartphones and tablets have started displaying strange “Security threat” notifications, suggesting the deletion of the app Google , as it is detected as malware, specifically “ TrojanSMS-PA .”
These security alerts, which are apparently what we call false positives, state that “immediate uninstallation is recommended” of the application, as it is considered dangerous.
Specifically, if users click on the “View Details” option, the notification warns that the app has been detected sending hidden SMS messages.
See also: Iranian Tortoiseshell group launches new waves of IMAPLoader Malware attacks
“ This app has been detected sending SMS privately, enticing users to pay for adult content, downloading/installing apps, or stealing private information, which may cause damage and violations privacy ,” the security alert for Huawei , Honor , and Vivo smartphones details .
“We recommend that you uninstall it immediately,” he emphasizes.
TrojanSMS-PA malware
TrojanSMS-PA is a malware that targets smartphones, with the aim of defrauding and stealing users. Once TrojanSMS-PA enters the device, it begins to perform malicious actions without the user's consent. The malware is dangerous for users, as it can cause significant financial losses and violate their privacy.
User reports
Many Vivo and Huawei users have reported the issue on Google and Huawei support forums, Reddit , and various other Android.
According to BleepingComputer, which contacted Google, a recent app update is not responsible for these warnings about the TrojanSMS-PA malware. A company spokesperson said that Google Play Protect does not trigger the notification.
See also: IoT Malware attacks increased by 400%
“This security alert was not triggered by Google Play Protect and appears to be coming from a device that is not Play Protect certified and does not have access to the official download of Google’s core apps from Play. We recommend contacting your device manufacturer for more information. Google Play is the only app store where you can officially download Google’s core apps for Android. All Google apps go through the same rigorous testing as all other apps on Google Play. These tests are designed to ensure that apps are safe and meet Google’s quality standards,” a Google spokesperson told BleepingComputer.
According to BleepingComputer, these notifications also appeared on a Huawei device with the core Google apps pre-installed (before the ban) and no side-loaded apps. Therefore, Google's explanation does not accurately reflect the types of Android affected by these notifications.
The notifications appear to be coming from the “Huawei Optimizer” app on Huawei devices. However, it’s unclear which apps are showing the security notifications for Vivo or Honor phones.
See also: Grandoreiro Malware: New version targets users in Spain
Those who have not side-loaded the Google app on Huawei, Vivo, or Honor phones should not worry about this notification.
A suggested solution to disable the “false alarm” is to go to Settings > Apps > Optimization > App info > Storage > Clear cache / Clear data. Finally, restart your device. Alternatively, try uninstalling and reinstalling the Huawei Optimizer app.
Source: www.bleepingcomputer.com
