Skip to main content

CamScanner app found to have malware. You should delete it immediately

If you use an app called CamScanner for scanning documents, you might want to consider booting it off from your phone immediately. A study by the security firm, Kaspersky has found malware inside CamScanner — an app which has been around for about a decade and accumulated 100 million downloads on Android.

The report says security researchers discovered malicious code inside the CamScanner’s versions published between June and July. CamScanner’s developers reportedly added a new advertisement module in that period.

The malware, once activated, is capable of executing and downloading additional malign files on its own in the background. On CamScanner specifically, the module was programmed to launch intrusive ads across the entire phone. In a few cases, it also signed up users for paid subscriptions without their consent.

Since the revelations went live on Kaspersky’s blog, Google has taken down CamScanner from the Android app store.

In a statement, CamScanner agreed that a new ad SDK called AdHub they’ve added was responsible for this and said: “after rounds of security checks, we have not found any evidence showing the module could cause any leak of document data.”

The company has tweeted the latest build of the app if users wish to update the one installed on their phone. The issue doesn’t seem to affect CamScanner’s iOS client.

However, at least until Google green-lights CamScanner’s new build and allows it back on the Play Store, it’s best to stay clear of the app. Besides, this isn’t the first time CamScanner has found itself in such a crisis. Earlier this year in April, an update brought loud, full-screen video commercials to the app.

CamScanner actively began to make headlines for all the wrong reasons after it was acquired by a China-based company, Instig. Interestingly, the harmful code found on the app’s recent versions is known to come pre-installed on Chinese phones.

For those looking for an alternative, there is a host of options available. The one we recommend is Microsoft’s Office Lens which comes with all the features you’d want from a document scanner and a smart algorithm which can automatically crop documents, whiteboard shots, and more.

You can also simply employ the Google Drive app which most likely is already installed on your phone. To use the document-scanning feature, tap the Plus button at the bottom right corner on the app’s home page and then select Scan.

Editors' Recommendations

Shubham Agarwal
Shubham Agarwal is a freelance technology journalist from Ahmedabad, India. His work has previously appeared in Firstpost…
Delete these 17 malware-infested iPhone apps immediately
Apple iPhone 11 Pro and Pro Max blurry hero shot | Apple September 2019 Event Keynote

Apple removed 17 apps from the App Store this week after researchers discovered that the apps were infected with malware.
The apps in question were discovered by mobile security company Wandera and were published by the company AppAspect Technologies. While all of the apps did what they claimed to do in the app store, they also had some pretty gnarly things going on in the background:
“The clicker trojan module discovered in this group of applications is designed to carry out ad fraud-related tasks in the background, such as continuously opening web pages or clicking links without any user interaction,” Wandera explains.”The objective of most clicker trojans is to generate revenue for the attacker on a pay-per-click basis by inflating website traffic. They can also be used to drain the budget of a competitor by artificially inflating the balance owed to the ad network.”

While malicious, the only impact to users would have been slower phone performance and inflated data use. The apps were able to bypass Apple’s approval process because the malicious activity was happening not within the app's code, but rather through contact with a remote server.

Read more
You need to delete these 24 malware-infested Android apps right now
Android 10 Assistant Navigation

A number of apps have recently made their way into the Google Play Store with a little something extra: malware.
The malware, which has been dubbed “Joker,” is designed to sneakily sign users up for subscription services, ones that they might be charged for over the course of several months before they even realize that they’re subscribed.
Cybersecurity researcher Aleksejs Kuprins explained the issue in detail in a Medium post.
The malware appears to be targeting specific countries, including  Australia, Austria, Belgium, Brazil, China, Cyprus, Egypt, France, Germany, Ghana, Greece, Honduras, India, Indonesia, Ireland, Italy, Kuwait, Malaysia, Myanmar, Netherlands, Norway, Poland, Portugal, Qatar, Republic of Argentina, Serbia, Singapore, Slovenia, Spain, Sweden, Switzerland, Thailand, Turkey, Ukraine, United Arab Emirates, United Kingdom and the United States.
The majority of the apps in question targeted specifically European and Asian countries and required a user to be using a SIM card from those regions in order for the malware to execute. In total 24 different apps were infected with the malware. Those apps were installed roughly 472,000 times. Metadata suggests that the apps started their campaigns in June 2019, although some may have also existed in the past.
That said, Kuprins notes that Google seems to be on top of the issue. Google removed all of the impacted apps from the Google Play store without any contact from the security researchers. 

Here's the list of apps infected with the Joker malware:

Read more
You don’t want to see this warning on your Google Pixel phone
Someone holding the Bay blue Google Pixel 8 Pro.

It's summertime in the U.S., so it's getting hot. When that happens, keeping yourself and your mobile devices cool is important. With that in mind, Google is developing a new message that will be displayed on Pixel phones when they overheat.

As 9to5Google discovered in fresh code, Google will no longer show a basic message warning when a phone may be overheating. Instead, it plans to post: "Phone needs to cool down: You may experience slower performance. Try avoiding direct sunlight or close any battery-intensive apps."

Read more