200 million downloaded keyboard device Spying & Stealing Information Remote Server “GO Keyboard”

spyware

One of Android’s most famous “GO Keyboard” keyboard application secretly spies user input activity and collects a large amount of data to send to remote servers.

Go Keyboard is very common in Google Play Store app which offers customized keyboards with different colorful and attractive themes.

This GO KeyBoard applications were downloaded from 200 million users around the world, which is currently developed by the Chinese GOMO Dev team.

Only imagine if someone secretly records all of your typing data, including your credential for the bank account, email keys, private messages, and sends all of this information to third parties and sometimes it can be sold.

This malicious operation was carried out by a technique that was prohibited to access a very dangerous program.

This malicious behavior has been identified by AdGuard Researchers and was observed after its launch by analyzing the web traffic of the app.

How do you spy on the keyboard?

Ad Blocker AdGuard For Android app The inspection of the traffic of apps to filter the traffic log shows you what exact web requests your applications are sending.

This inspection feature was checked against a GO keyboard and found that a significant amount of data from the computer was detected immediately after initialization and sent to a remote server.

According to Adguard, Apps that steal a user’s authentication information (such as usernames or passwords) or that mimic other apps or websites to trick users into disclosing personal or authentication information.

In addition, Go KeyBoard Secretly Sending A great deal of Personal Information such as Google’s email account in addition to languages, IMSI, location, network sort, screen size, Android version and build, phone model, and so on.

“We will never collect your personal information including credit card information. In reality, what you type and who you type is important to us!”

It communicates with dozens of third-party trackers and ad networks. It also downloads over 14 MB of data and sends quite a lot of information about you right after the installation. It has access to sensitive data including your identity, phone calls log, contacts, microphone.

Some Reports Say 10 out of 7 apps Share your Personal Information with a third party and these developers have crossed the line and broken the Google Policy entirely.

 

Mark Funk
Mark Funk is an experienced information security specialist who works with enterprises to mature and improve their enterprise security programs. Previously, he worked as a security news reporter.