Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection

Microsoft’s .NET MAUI lets developers build cross-platform apps in C#, but its use of binary blob files poses new risks by bypassing Android’s DEX-based security checks.

New Android malware is using Microsoft’s .NET MAUI to fly under the radar in a new cybersecurity dust-up this week. Disguised as actual services such as banking and social media apps targeting Indian and Chinese-speaking users, the malware is designed to gain access to sensitive information.

Cybersecurity experts with McAfee’s Mobile Research Team say that, while the threat is currently aimed at China and India, other cybercriminal groups could easily adopt the same method to target a broader audience.

.NET MAUI’s hidden danger: Bypassing security

Microsoft launched .NET MAUI in 2022, a framework that lets developers build apps for both desktops and phones using C ...