Internet experts have warned all users of Android operating system phones to check their devices as soon as possible to ensure that the commonly used "Task Manager" app is not installed. They urged anyone with the app to delete it immediately.
The app in question is "Todo: Day Manager," which helps users manage their daily tasks and reminds them of deadlines. The danger of the app lies in its ability to allow malware to take over users' banking information after downloading a banking malware called "Zeenomorf," and even accessing their SMS messages.
Security experts from "Zscaler ThreatLabz" discovered that once the app is installed on a phone, malware is downloaded as a fake "Google" service app from the internet hosting service "GitHub," and it begins silently by prompting users to enable access permissions. Once this permission is granted, it adds itself as a device administrator and will not allow users to disable it.
Experts explain that "if the app is installed on the phone but permission for the malware has not been granted, the user should be able to delete the app without any issues. However, if the app has been granted access, the user may need to back up their files and perform a factory reset of their phone to remove the app."