Rogue iMessage Chat Client Found in Play Store

iMessage01

Google removed the app iMessage Chat for Android from the Play Store yesterday after discovering it’s not exactly what it claims to be.

The iMessage for Apple products allows users to send text messages via WiFi for free without incurring the charges or limitations we typically see with a phone plan. It’s a popular app and I can see how an Android version could be well received, with some iPhone users switching to Android.

According to researchers, the suspicious iMessage app could potentially steal Apple ID’s, passwords and is capable of downloading additional APKs.

Along with stealing credentials it could capture your SMS messages, which might contain confidential data you probably don’t want being exposed or sold.

We recommend you uninstall iMessage Chat for Android. Even though Google has removed the app from the Play Store, it is still being hosted in other locations.

It’s not clear who first reported the app or if it was created with malicious intent.

iMessage02

I applaud Google for their quick removal of this app once it was reported, however it’s also discouraging news.

As much as I commend them for improving the Play Store’s vetting process, they still have a ways to go.

Google needs to dig a little deeper and take a look at the behaviors of the app.

Please review mobile apps you install and take the additional time to read user reviews, it’s possible someone has already discovered an app is shady.

ABOUT THE AUTHOR

Armando Orozco

Senior Malware Intelligence Analyst

Faux geek who likes to keep it bland. Experienced in behavioral, PC, and mobile technologies.