‘Pokémon Go’ Success Leads To Spread Of Malicious App Version

Without a doubt, “Pokémon Go” has had an explosive launch, with millions of players trying to download and use the app since it was released last week. The response was so overwhelming, in fact, that the servers couldn’t keep up and was experiencing crashes for three days. Patricia Hernandez over at Kotaku wasn’t particularly thrilled with not being able to play the augmented reality game properly, but it seems a lot of other people were able to see what all the fuss is about. Unfortunately, the rabid desire to get the app in places where it isn’t available yet has resulted in the spread of a malicious version via APK files.

Outside of Japan, the only places where “Pokémon Go” has been officially released is New Zealand, Australia, and the United States. However, many outside of those countries are desperate to try the game, which is why players have been sharing APK files to their friends in other places, according to Gizmodo. These files will then allow these players to use the app in their respective areas.

However, the security firm “Proofpoint” discovered that one of the APK files being shared contains code that has been modified in order to create a back door to Android devices called “DroidJack.” In an official post, “Proofpoint” discussed the full implications of this infected APK version, including providing the creators complete remote access to the device.

As a result, the security firm is warning users about downloading APK files from unofficial, third-party websites. To be clear, the act of downloading APK files from these sites will not automatically infect the device. However, it does increase the risks significantly.

Android Police actually posted the APK source that they use, which the site assures readers is completely safe. However, with caution being a particularly valuable trait in the age of digital security threats, waiting for the official release of the game is the best way for users to make sure that they are getting a safe copy of “Pokémon Go.”