Hello all… so i decided to install a gps tracker for my family, searched for tracker and came across this app https://play.google.com/store/apps/details?id=com.fsp.android.c&feature=search_result#?t=W251bGwsMSwxLDEsImNvbS5mc3AuYW5kcm9pZC5jIl0., seeing the many positive reviews i installed it and noticed upon launching that the app’s label was in fact life360…which was working online with the actual life360.com;
Feeling that something wasn’t right i searched for life360 and found this app https://play.google.com/store/apps/details?id=com.life360.android.safetymapd&hl=en which is supposed to be the genuine app. Avast mobile security did not detect the possibly rogue app (which i guess it isn’t supposed to).
The signin credentials are also working fine on the supposedly genuine app…finding the developer’s website on that supposedly rogue app took me to a blank page on tumbler which sent alarm bells ringing about what all could that app have done seeing the permissions such kind of applications have…it was just around an hour that it took me to realize this
I have since then changed the password i had created using that app and contacted the original developer about this…while also reporting it to google via flag as inappropriate.
What should i do? Anyway to analyze this possibly rogue app?