Question regarding Google Play store and trojan horse app - General Topics

Hi,
I'm a relative newbie to this forum (used tips here to root a phone a while back, but this is completely unrelated to that).
A couple of years ago I installed an app on the Google Play store that was a trojan designed to steal passwords for an online bitcoin wallet/trading site. The people who designed the app had no real affiliation with the online wallet. By the time I realized what was done my password was stolen and my account was wiped out. I am now trying to work with a security firm to reclaim the stolen bitcoin.
They are asking for logs from my device as proof that this malignant app was downloaded, as well as proof that i had downloaded the app
However:
1. I wiped my device after uninstalling the trojan horse app- I backed up my device via google
2. Any history that this app existed, including my download of it, and all the negative reviews citing theft of passwords, has been removed from the google play store
My question is, is there any way I can use my google back up to locate log files indicating i downloaded this app? Is there any way i can go to Google and ask for proof that this trojan horse app existed and that i did indeed download it?
Thanks for any and all information!

Related

[APP] My apps banned from Play Store back online

Hi all,
I had a few apps on the Play Store some months ago, which got removed after Google decided to ban me from the Play Store for who knows what reason. Apparently the cause was the "sexy" nature of the apps, which still doesn't explain why my app got kicked out and so many apps that are much worse than mine still live there.
Well, anyway, I've decided to put them all back online on a website for users to download, so if you're interested in them feel free to download them and give me some feedback! All the apps have a brief descriptions and screenshots:
drfeelgoodsw . appspot . com (sorry, being a newbie no link allowed...)​
They're all apps to quickly access galleries of well known sexy and gossip websites (Front Magazine, The Sun Page 3, Egotastic and so on), and they all allow you to mark those galleries as favourites, save them on your SD card, etc. Nothing fancy but I hope you'll enjoy them nevertheless! If you have any suggestion on how to improve them, or just know some other website you'd like a similar app to be made for, I'd love to hear it from you
They must have been deleted again because nothing comes up in a search for them
Sent from my Nexus 7 using xda premium
sixfearstheseven said:
They must have been deleted again because nothing comes up in a search for them
Sent from my Nexus 7 using xda premium
Click to expand...
Click to collapse
Sorry, I should have been clearer... by "back online" I actually meant they were available again on the web page I created for the purpose, not on the Play Store. I tried publishing them on Android PIT after they were removed from the Play Store, but that only lasted a few weeks, as apparently Android PIT only hosts apps that are also on the Play Store (quite silly of them, considering they're supposed to be an alternative market, but anyway...). I'm looking for other markets to publish the apps on, but until then the apps are available for download on the page I linked in my previous post. Those apps automatically look for updates using a JSON string on the same page, so updates should be easy to keep track of even without a Market in place.
No feedback? Either the apps are perfect the way they are, or they really suck!!
DrFeelgoodSW said:
No feedback? Either the apps are perfect the way they are, or they really suck!!
Click to expand...
Click to collapse
Also, I suspect that people are getting a bit wary of sideloading apks when they could be malware. That's unfortunately a level of trust you lost when you were banned from the play store.
cyansmoker said:
Also, I suspect that people are getting a bit wary of sideloading apks when they could be malware. That's unfortunately a level of trust you lost when you were banned from the play store.
Click to expand...
Click to collapse
Oh, I hadn't thought about that...
Well, if that can help, I can post a screenshot of the mail from Google describing their exact reason why I got banned, which had nothing to do with malicious behaviour in my app. That said, anyone can just monitor the traffic my app generates, and see that, apart from an update check at the beginning (a GET to retrieve a JSON file), the only connections are towards the website each app is wrapping. I would be quite dumb to post malicious apps on an expert den of Androiders like XDA Developers anyway ehehe
Anyway, if that can help I ca post the complete source code of one of the apps to let people check that everything's fine. The core of the apps is mostly the same (activities, sqlite database, image cache, httpclient+jsoup), apart from differences related to their structure (e.g., Page3 has much more activities and choices than GQ), so that should help understand I'm not hijacking anything. Of course, you could object there is no guarantee the code I'm posting is exactly the one used to generate the APKs, as we'd be back to the trust issue at the beginning...
Well, if there's any way I convince those in doubt that I'm in good faith just let me know. About the Play Store, unfortunately there's no way I can get back there. In the mail I received, I was told I was banned and that I could not open a new account to publish the apps again, so that's out of the question. Android PIT only accepts apps that already are on the store, so no go either. I tried other markets like Androlib and SlideMe, but both failed to send me the confirmation mails I needed to confirm the account, so I'm wondering if they're even a viable solution for developers right now. I've already discarded the Amazon App Store option, as there's an annual fee the likes of which only Apple could conceive. Anyone knows more alternatives to publish apps?

Saving an APK for a purchased app that no longer exists on Google Play

I'm not sure if this is against the rules, I took a look but couldn't find anything pertaining to this.
My roommate and I play Dungeons n Dragons and we found an awesome application on Google Play a while back called Fifth Edition Character Sheet. I never did end up paying for it, and by the time I tried to it had been removed from Google Play. I can't find the reason why, only that it's now gone. My roommate did pay for it. The method of purchase was via in-app payment. It opened up the Google Play thing, allowed him to pay, and that was it. Unlocked full features. However he's selling his tablet and wants to transfer the app to his Phone instead. I can't find a way to do this. Anytime I've used a Save APK option it just saves the base version without the tag saying he paid for it with all features unlocked. It's brutally annoying because, well, he paid for the app. He can't install it through Google PLay anymore on his phone and will unlock automatically, it's just non-existent. I've found the APK online a few times but there were no premium/paid ones.
So my question is this. Is there anyway to save the APK while retaining the fact that it was paid for so he can use it on his phone? Otherwise we'd have to go back to using other things which suck immeasurably compared to this awesome app.

Is there a good Non-Google App Store (already tried Amazon and LG)

(this is a duplicate of my other thread. I realized the question doesn't ONLY apply to my old Nexus 4)
I'm trying to build an android phone with no Google apps on it, for privacy purposes.
I've got LineageOS on my rooted phone with no issues.
Getting apps is another matter. Amazon's app store doesn't even have Amazon's app, the LG store won't run on my phone. The various .apk-download sites I've seen either don't do paid apps, have outdated versions, or are basically for "cracked" apps, which i don't want to use.
Downloading .apk files can work, but most apps do not have such thing available, and I find often my phone's browsers choke on the link, and I have to download to my pc and then use adb to push the file across.
Is there a decent app store (or other app source) that isn't Google?
You could try Fdroid This is the website for Apk
Fdroid is all open source Apk's
bigfatguy said:
(this is a duplicate of my other thread. I realized the question doesn't ONLY apply to my old Nexus 4)
I'm trying to build an android phone with no Google apps on it, for privacy purposes.
I've got LineageOS on my rooted phone with no issues.
Getting apps is another matter. Amazon's app store doesn't even have Amazon's app, the LG store won't run on my phone. The various .apk-download sites I've seen either don't do paid apps, have outdated versions, or are basically for "cracked" apps, which i don't want to use.
Downloading .apk files can work, but most apps do not have such thing available, and I find often my phone's browsers choke on the link, and I have to download to my pc and then use adb to push the file across.
Is there a decent app store (or other app source) that isn't Google?
Click to expand...
Click to collapse
What's wrong with Google? Whatever I have a few:
GetJar (Has not be well maintained, spam, malware etc. Lurking on there now)
SlideME (Abondon, apps are so old)
Aptoid (Has some stolen apk, malware)
TutuApp (dumb kids use it to get modded games and apps, don't go there)
The Internet (APKMirror is the best)
Google Play
Sent from my KFAUWI using Tapatalk
dro3m said:
What's wrong with Google?
Click to expand...
Click to collapse
1: I've decided, if possible, to act on the privacy concerns I've had about google for quite some time now
2: I'm a gun nut law abiding firearms enthusiast and don't appreciate their recent policy changes on Youtube. Since my information is the product they sell to make money, I wish to withhold it.
it might be a pipe dream, but a guy can try.
Thanks for the places to try, all.
In addition to Google Play and Amazon Appstore, I suggest Huawei App Store. http://appstore.huawei.com/
Just for your reference.
You could use the Yalp store app which is an app that will get and down load your apk from play store anonymously
You can download it here
Hi7m3up said:
You could use the Yalp store app which is an app that will get and down load your apk from play store anonymously
You can download it here
Click to expand...
Click to collapse
That may be an ideal solution... use Google's store, but don't have Google's app on my phone...
Yeah ideal for people who have restriction's of some type.
You probably noticed that yalp store (well at least the yalp bit) is play store backward's "very fitting"

Mate 30 pro GSF ID

i am wanting to get a mate 30 pro and of course install google services on it...
in almost every video tutorial i saw whether its the mate 30 pro or the mate 30 or the p40 the GSF ID is always the same.
the GSF ID is supposed to be unique to every device yet in these videos they are all the same (see below the two i got from videos).
so in essense 100's if not 1000's of people using the restore method are using the same GSF ID? isnt that dangerous to the google play account its lined to?
I am also curious whether this has to do with the backup we're restoring to the phone.
Also, i am spooked by the big G application. who knows what backdoor it maybe opening?
3db5868d120809ca
3497da632b1481ce
The big G is the lz play exploit app. I used it to get GMS on my mate 30 Pro last year when it was still an easy fix. I have noticed nothing but I did uninstall it after the fix. Not sure about the most recent fixes? As for the G Id, this could be something like one of Microsoft bulk licensing where one product Id is put on loads of the same PCs ( Dell, HPs etc), not sure but could be something like that? It is obviously from a working account that has been backed up though and copied. But if you need to use GMS, then there is not much choice really.
Is there a working option without crutches now?
Aliexpres now sell phones with Already Installed Google Services
Sathelp said:
The big G is the lz play exploit app. I used it to get GMS on my mate 30 Pro last year when it was still an easy fix. I have noticed nothing but I did uninstall it after the fix. Not sure about the most recent fixes? As for the G Id, this could be something like one of Microsoft bulk licensing where one product Id is put on loads of the same PCs ( Dell, HPs etc), not sure but could be something like that? It is obviously from a working account that has been backed up though and copied. But if you need to use GMS, then there is not much choice really.
Click to expand...
Click to collapse
Thanks for the reply.
I understand your explanation but as i read about the GSF ID its like a car license number or rather a serial # for a device. this ID could be tied to your google account or rather device serial #.
I now understand why when installing and uninstalling the framework you have to keep retrying to get the ID back...i think its a hole in the google system where it just gives up and assigns it to you.
I dont know. I feel this is dangerous that all of us are sharing one GSF ID from a backup.
If the device was able to be rooted you can generate a new one.
i am sure the people that generated this backup had rooted their device because when the device first launched there was a service to unlock the bootloader. now its no more.
this is the article i am talking about that concerns the GSF ID:
https://blog.onyxbits.de/what-exactly-is-a-gsf-id-where-do-i-get-it-from-and-why-should-i-care-2-12/
LamerOk said:
Is there a working option without crutches now?
Aliexpres now sell phones with Already Installed Google Services
Click to expand...
Click to collapse
they are probably using the methods everyone is using, putting the phone back in the box and shipping it. i see no other solution. unless root and thats not possible since bootloader unlock services for the device has stopped.
That was how my mate 30 Pro arrived but I reset it and used the lzplay method when it worked back then myself for the sake of it. Good read above, I think we will have to wait a while to see what happens next.
Sathelp said:
That was how my mate 30 Pro arrived but I reset it and used the lzplay method when it worked back then myself for the sake of it. Good read above, I think we will have to wait a while to see what happens next.
Click to expand...
Click to collapse
I think we should no longer hope that the USA will grant Google the authorization to work with Huawei seen the tensions between China and the US and the Covid-19 story. I have google spy services up and running since late last year and have no issue, granted my use of google apps is very limited. If we have a backdoor installed through lzplay we will never know but if you have google, wattsapp, fakebook etc installed you can be sure you will be tracked, profiled in one way or the other. That is a fact.
cfds said:
I think we should no longer hope that the USA will grant Google the authorization to work with Huawei seen the tensions between China and the US and the Covid-19 story. I have google spy services up and running since late last year and have no issue, granted my use of google apps is very limited. If we have a backdoor installed through lzplay we will never know but if you have google, wattsapp, fakebook etc installed you can be sure you will be tracked, profiled in one way or the other. That is a fact.
Click to expand...
Click to collapse
So your suggestions... to get rid of Google in order not to be tracked?
the average consumer has no clue of what lzplay is doing. its the most dangerous app out there using the MDM technique (mentioned above).
today at the mall i saw a girl representative for a reseller company in my country for huawei products and she had it installed.
i warned her and told her she committed a mistake but ppl see their phones working fine and dont worry about it. you wont know if the app is sending or stealing your data...(Well, actually, you can install a firewall app and track which apps are sending data to what destination - thats one way that came to my mind)
The issue remains is: We dont know who created lzplay and made a website and made the app. thats the scary part.
Now, another perception of this could be the following:
MAYBE, just maybe the lzplay was released by huawei themselves and if so then we need not worry. i mean we run on their operating system. they would have no interest in stealing data. they can already do that ...
This is being optimistic and thinking this maybe a fact.
i, myself will not venture into this and wont attempt it. Almost all apps work fine except for one thing: Games that rely on Google play games will fail without having the GMS files installed.
I dont play games so its not a big deal for me.
besides, most games now-a-days give you the option of logging in with facebook or google play games. select facebook and you'll be fine.
cylent said:
the average consumer has no clue of what lzplay is doing. its the most dangerous app out there using the MDM technique (mentioned above).
today at the mall i saw a girl representative for a reseller company in my country for huawei products and she had it installed.
i warned her and told her she committed a mistake but ppl see their phones working fine and dont worry about it. you wont know if the app is sending or stealing your data...(Well, actually, you can install a firewall app and track which apps are sending data to what destination - thats one way that came to my mind)
The issue remains is: We dont know who created lzplay and made a website and made the app. thats the scary part.
Now, another perception of this could be the following:
MAYBE, just maybe the lzplay was released by huawei themselves and if so then we need not worry. i mean we run on their operating system. they would have no interest in stealing data. they can already do that ...
This is being optimistic and thinking this maybe a fact.
i, myself will not venture into this and wont attempt it. Almost all apps work fine except for one thing: Games that rely on Google play games will fail without having the GMS files installed.
I dont play games so its not a big deal for me.
besides, most games now-a-days give you the option of logging in with facebook or google play games. select facebook and you'll be fine.
Click to expand...
Click to collapse
If anybody who is without Google will share the experience, honesty thinking of making hard reset and stay without Google...
cylent said:
the average consumer has no clue of what lzplay is doing. its the most dangerous app out there using the MDM technique (mentioned above).
today at the mall i saw a girl representative for a reseller company in my country for huawei products and she had it installed.
i warned her and told her she committed a mistake but ppl see their phones working fine and dont worry about it. you wont know if the app is sending or stealing your data...(Well, actually, you can install a firewall app and track which apps are sending data to what destination - thats one way that came to my mind)
The issue remains is: We dont know who created lzplay and made a website and made the app. thats the scary part.
Now, another perception of this could be the following:
MAYBE, just maybe the lzplay was released by huawei themselves and if so then we need not worry. i mean we run on their operating system. they would have no interest in stealing data. they can already do that ...
This is being optimistic and thinking this maybe a fact.
i, myself will not venture into this and wont attempt it. Almost all apps work fine except for one thing: Games that rely on Google play games will fail without having the GMS files installed.
I dont play games so its not a big deal for me.
besides, most games now-a-days give you the option of logging in with facebook or google play games. select facebook and you'll be fine.
Click to expand...
Click to collapse
I understand your concerns and it is very valid. Over the last 4 months of usage, I have not notice any unauthorised data being sent. I had a filewall installed for removed it just a couple of weeks back.
But again, I can't be 100% sure.
Archibald1963 said:
If anybody who is without Google will share the experience, honesty thinking of making hard reset and stay without Google...
Click to expand...
Click to collapse
I just do a full reset of my phone with GMS trying only using HMS. So far it's easy with phone clone and Aurora store. The only thing I miss are the notifications from Google and Twitter, but everything else is working perfect.
If you guys have specific questions concerning the GSF ID, I'd be happy to answer them. I'm the author of the aforementioned blog post, as well as several tools that deal with Google Play Services (in case you don't have/want them on your phone).
onyxbits said:
If you guys have specific questions concerning the GSF ID, I'd be happy to answer them. I'm the author of the aforementioned blog post, as well as several tools that deal with Google Play Services (in case you don't have/want them on your phone).
Click to expand...
Click to collapse
Is there a way to change de GSF ID of the phone manually? For example give the GSF ID of a Samsung device that works with FCM to a Mate 30 Pro, so that the Mate 30 Pro won't have the notifications issue when GSM are installed.
Or go back to a GSF ID that works perfectly and by mistake the phone's memory has been wiped and now the GSF ID doesn't work to receive FCM notifications.
tistasis said:
Is there a way to change de GSF ID of the phone manually? For example give the GSF ID of a Samsung device that works with FCM to a Mate 30 Pro, so that the Mate 30 Pro won't have the notifications issue when GSM are installed.
Or go back to a GSF ID that works perfectly and by mistake the phone's memory has been wiped and now the GSF ID doesn't work to receive FCM notifications.
Click to expand...
Click to collapse
You are not suppose to change it manually. However, you can always request a new one by clearing the cache of the market app. The GSF ID is kept in that apps database, so if you wanted to change it manually, you'd have to install the android platform tools, use ADB to pull the file (root required), use sqlite3 to make the changes (the key is called "android_id", not GSF ID for legacy reasons), then push the file back to the device. Reboot afterwards.
onyxbits said:
You are not suppose to change it manually. However, you can always request a new one by clearing the cache of the market app. The GSF ID is kept in that apps database, so if you wanted to change it manually, you'd have to install the android platform tools, use ADB to pull the file (root required), use sqlite3 to make the changes (the key is called "android_id", not GSF ID for legacy reasons), then push the file back to the device. Reboot afterwards.
Click to expand...
Click to collapse
I used the Windows tools above to change the GSF ID of my un-rooted Samsung Galaxy A325G, and they worked fine... but does anyone know how the new GSFID was determined?
Is it random?
EDIT: I might be able to figure out how it's generated using "Dummy Droid".
[Tool] DummyDroid - GSF ID generator
Dummy Droid is a mainly a companion tool for the Raccoon APK Downloader . It allows you to create hardware profiles for arbitrary Android devices and upload them into your Google Play account, generating a new GSF ID in the process.
Mocks can either be generated by probing an existing device via ADB or be completely made up from scratch. You (may) need this tool if Google Play won't give you access to an app because of device incompatibilities, country or carrier restrictions. You (may) also need this tool if you are an app developer yourself and want to test compatibility filter settings without actually owning the target device.
Click to expand...
Click to collapse

Why most developers don't support 3rd party apps store?

it's crazy when you don't want Google on your phone for privacy,
like some devs have "google play DRM" with their app, so even if you do "APK" backup, it won't work unless you have google services and google play store.
heck, some of these apps require you to be "OnLiNe" for 24h wtf is this?
its 2022 devs should do better than this and stay a way from monopoly and anti-privacy companies.
Well put. For some apps, I have offered devs 10 to 20 USD to buy a license. Very few bother to reply. These apps might cost 2 to 5 USD on google play. My phone has no gapps installed so often I have to get these apks from other sources. In many cases I already paid for them when I had google play years ago, so I don't feel any guilt in using them. It is indeed a hassle to attempt to patch apps I previously bought to run on a phone without google as they otherwise phone home for a license check.
However when I did get a reply from a dev I bought thru Amazon and emailed the payment screenshot to the dev and they sent me a link to download an apk!
Anyone on here should be able to install an apk without an app store.
Fdroid is the only app repository I will consider putting on my phone.
Strange times indeed. Very few people understand that most of the network activity done by apps has very little to do with the apps actual functioning, in most cases. Its just a privatized big brother. I hate it.
End rant. Sorry.

Categories

Resources