Android PUP Detections - Oh, Not That One Again!
Potentially Unwanted Program – that’s what PUP stands for. You probably already had a chance to meet some PUPs on a Windows PC, but how does a PUP look on an Android phone? How will you know how to handle it? All of this will be explained here.
When a PUP alert attacks you, don’t panic.
For starters, it’s just a warning. It’s not a standard virus and, no, your life is not in danger. PUP detections were made to warn people when a suspicious component or ability is detected within the application.
Let’s say you downloaded an app that’s called “Christmas Carols” (don’t panic about that, either; it’s still a month and a half till Christmas) and a PUP warning hits you. The detection name reads “Android:SpyPhone-E [PUP]”. What should you do? Well, what I would do is to sing Silent Night to that app and wave goodbye while uninstalling it. Why? Well, it’s an app that’s supposed to play Christmas carols and not “SpyMyPhone” or whatever that PUP warning says.
Just so you know, in this particular case, this nice app would most probably record your voice when you’re rocking the Jingle Bells in wild style, thinking nobody hears you. The next day you might find yourself on YouTube with 8 million views. Or not. Anyway, it’s your decision to put yourself through this or not, so the next time you want to be a YouTube star, you’ll do it your way and not accidentally by SpyPhone.
That’s what PUP detection is here for, to let you know when something might not be exactly what you want or think it is.
However, there’s a second version to that story. There actually is an application called Spy Phone and yes, you’ll get the same warning when you try to install it. Why? Because this app is used for stealth image taking, video recording and… audio recording. The main difference between this app and the evil Christmas Carols one is that you’re downloading this app knowing that it will record you, or in this case, most probably someone else, because that’s what this app is for.
So, in this case, what I would do is hit "Ignore" and enjoy the potential of this app, for example recording a friend talking in his sleep, without him knowing it. Yes I could most probably do that with some regular app because, you know, he is asleep, but you know… Anyway, my point is that in this case it’s okay to use such an app after you get a PUP warning.
To wrap it up, this is what helped me decide:
In this case I was installing Radio, got an Android:SpyBubble-G [PUP] warning, checked out Privacy Info and found out that this app would track my GPS, send and read SMS messages, read contacts and other things that a Radio app most probably shouldn’t do. Also the detection name is nowhere close to the app name. I just wanted to listen to the radio, so this app goes away by hitting “Uninstall.”
So, I hope you’re not afraid anymore. We all are just regular people and PUPs are just PUPs. There’s no rocket science behind it. There’s an option to switch off PUP detection in Settings, so if you feel like it, turn it off, but if you want my advice, keep it on. Keep it on even if you install only apps from Google Play Store. There's no place clean from PUPs and you can't be 100% sure that what you're trying to install is clean without having an antivirus on your smartphone.
Samples used in this article:
Sample: Spy Phone
Highly effective Cerber ransomware is spread via phishing emails and demands more than $700 in ransom
Based on analysis of past Locky ransomware attacks, experts in the Avast Threat Labs predict that another attack is imminent.