Skip to main content

Fake Alexa setup app for iOS taken down but could still be dangerous

If you downloaded One World Software’s scam “Setup for Amazon Alexa” iOS app from the iPhone App Store store, do yourself a favor and delete the app. If you already installed it, uninstall the app and then delete it. Fortunately, at least for all others, the fake app is no longer listed on the App Store.

The malicious app got as high as sixth place in downloads in the Apple App Store Utilities section and 60th place overall in Top Free apps, according to 9to5Mac. Before the fraudulent setup app was finally taken down Thursday evening, December 27, it had received more than 9,400 ratings, Venture Beat reported.

Recommended Videos

After reported sales of millions of Amazon Alexa devices during the Christmas season, it’s not surprising the app climbed high on the download list. Many owners who wanted to configure new Alexa devices likely used its name as a search term.

Please enable Javascript to view this content

The Echo Dot printed setup guide instructs owners to download the Alexa App on the iOS or Android app store. No other app is required to set up an Alexa device. However, when a search for “Alexa” returns a long list of possibles, choosing an app named for what you want to do, such as in this case to set up Amazon Alexa, seems logical.

Users who downloaded the app have not reported any specific harm other than wasted time. Many of its rapidly acquired ratings complained the app didn’t work.

The scam app users are required to enter their Alexa device serial number, IP address, and a name for the device. The app’s privacy policy goes on and on about the required permissions you must grant the publisher to use the app. Users must allow the publisher to collect, use, and share information about you and your actions online. The personal information on the list included, “IP address, browser information, referring/exit pages and URLs, clickstream data … domain names, landing pages, page views, cookie data … mobile device type, mobile device IDs … and location data,” Venture Beat reported.

Two additional apps published by One World Software, “Marketplace – Buy/Sell” and “Any Font for Instagram” have also been removed from the iTunes Store.

As anyone who has submitted an app for the iOS App Store review process can attest, Apple’s app screening is rigorous. Regardless, “Setup for Amazon Alexa” did make its way through the filters, which is disconcerting. But now the app has been removed.

Bruce Brown
Bruce Brown Contributing Editor   As a Contributing Editor to the Auto teams at Digital Trends and TheManual.com, Bruce…
You can finally move your WhatsApp chats from Android to iOS
WhatsApp and Telegram app icons.

Moving WhatsApp chats from Android to iOS has been a painful task for years. But not anymore, as Apple and WhatsApp have made the process a whole lot easier. Starting today, Apple is adding a feature that allows you to move chats between the two platforms. The feature is a part of Apple’s existing “Move to iOS” Android application. It’s worth noting that the feature is currently available for beta users only, so non-beta users might have to wait for a week or two as it's rolled out in phases.

This is a big move since 2 million people use WhatsApp and, until now, there wasn’t an official method to move conversations between Android and iOS. There have been third-party solutions here and there, but nothing officially backed by Apple or WhatsApp. With the feature becoming available, users will be able to move their chats swiftly from Android to iOS.

Read more
iOS 15 bug recorded a ‘small portion’ of Siri interactions
three iPhones each showcasing a new feature of iOS 15

Apple has brought a lot of changes to its devices in the iOS 15 update with the new Focus taskbar, Live Text, the redesigned Safari browser, and more. However, the company has noted that the transition to the newest software hasn't been entirely smooth. Some users who opted out of Siri and Dictation's ability to record their voices for service improvements were recorded anyway.

Despite giving iOS users the ability to opt out of the service, recordings of unconsenting users were made and sent to Apple as the result of a bug in iOS 15.  The bug has since been fixed as of the iOS 15.2 update, and Apple addressed the issue by saying that it deleted "audio received from all affected devices" in a statement to ZDNet. In the same statement, Apple said that the bug turned on the Improve Siri and Dictation setting on unaware iOS users, but the company has turned the setting off again for those affected.

Read more
Apple’s iOS 15.3 update fixes critical Safari security bug
iPhone showing Home Screen with widgets resting on soft white cloth background.

Apple has just released iOS 15.3, and while this latest update doesn’t add any significant new features, it addresses at least one critical security flaw. Earlier this month, software engineer Martin Bajanik of FingerprintJS found a serious vulnerability in Safari 15, the browser included in iOS 15 and iPadOS 15, that could leak browsing history information and even credentials from online services that a person is using, such as Google, YouTube, Amazon, and sites using WordPress.

As Bajanik explains, many websites use an API called IndexedDB to request that browsers like Safari and Chrome store information in a local database on a person’s device. Under normal circumstances, a given website should only be able to request information about the databases that it created — any others should be invisible to it.

Read more