A new Russian phone application could steal user data. “This application is probably a way to capture people’s faces in high resolution,” said Jake Moore, ESET Internet Security’s Global Cybersecurity Advisor at MailOnline. I would doubt any application that requires that much data, especially one that is largely unknown and based in another country. ‘
Russian hacking of Italian sites: Senate and Ministry of Defense hit
Russian app could steal data, experts warn
The application is called New Profile Pic and has already been downloaded by thousands of people. It is present in both the Apple Store and the Google Play Store. In the Apple Store, the application takes first place in the ranking of photos and videos, while in Android One it has been rated by more than 25,000 users.
Where the application company is based
The company behind the app, Linerock Investments, is based in an apartment complex overlooking the Moskva River, next to the Russian Ministry of Defense and just three kilometers from Red Square. It is called Linerock Investments Ltd and is registered in Moscow according to the International Consortium of Investigative Journalists Database Offshore Leaks. It has a shareholder based in Panama City while a director is based in Russia. In 2017, a St. Petersburg-based company released FaceApp, which allowed users to upload a photo that would have aged thanks to artificial intelligence.
The requested data
Downloader agrees to share location, device details and other photos on social media feeds. What does the company say? “We collect some personal information that is provided to us voluntarily.” Which? “Your name, email address, username, social network information and other information provided during registration.” It also collects IP address, browser type and settings of a computer or device data of a mobile phone.
User fears
Twitter users share fears. One person labeled the New Profile Pic app as a “phishing scam”. “If you have it on your phone, delete it if you gave it full permissions, change passwords, notify your bank. A second Twitter user echoed the sentiment, saying that “the NewProfilePic app is Russian-owned and may contain ransomware.” Meanwhile, Cyber HelpLine, which bills itself as “expert advice for victims of cybercrime and online safety issues in the UK”, said the site’s overall trust score is just 14%.
The company’s response
An app spokesperson told MailOnline, “We are a BVI company with development offices in Russia, Ukraine and Belarus.” The spokesperson said they don’t share user information that isn’t listed in their privacy policy. The images are sent to their Amazon servers to apply the effects and are not visible to anyone. They added that the images will be deleted after two weeks.
Last updated: Wednesday 11 May 2022 at 18:45
© REPRODUCTION RESERVED