Android Question Infected App

[Pesciolina]

Infected App

I would like to point out that my app is not published on the store but only distributed to my association.
Lately it has been conflicting with the CreditAgricole Banking App, when they try to make payments with the App it tells me that the phone is compromised. If I uninstall my app, payments are allowed, what could this depend on?

Thanks for any advice

'This code will be applied to the manifest file during compilation.
'You do not need to modify it in most cases.
'See this link for for more information: http://www.basic4ppc.com/forum/showthread.php?p=78136

AddManifestText(
<uses-sdk android:minSdkVersion="14" android:targetSdkVersion="33"/>
<supports-screens android:largeScreens="true"
    android:normalScreens="true"
    android:smallScreens="true"
    android:anyDensity="true"/>)
SetApplicationAttribute(android:icon, "@drawable/icon")
SetApplicationAttribute(android:label, "$LABEL$")
SetServiceAttribute(Starter, android:foregroundServiceType, "location")
'End of default text.

SetApplicationAttribute(android:theme, "@style/LightTheme")
CreateResource(values, colors.xml,
<resources>
   <color name="actionbar">#0098FF</color>
   <color name="statusbar">#0098FF</color>
   <color name="textColorPrimary">#fff</color>
   <color name="navigationBar">#0098FF</color>
 </resources>
)
CreateResource(values, theme.xml,
<resources>
    <style name="LightTheme" parent="@android:style/Theme.Material.Light">
        <item name="android:colorPrimary">@color/actionbar</item>
        <item name="android:colorPrimaryDark">@color/statusbar</item>
        <item name="android:textColorPrimary">@color/textColorPrimary</item>
        <item name="android:navigationBarColor">@color/navigationBar</item>
        <item name="android:colorBackgroundFloating">@color/actionbar</item>
        <item name="android:itemBackground">#0098FF</item>
        
        <item name="android:colorAccent">#000000</item>       
     </style>
</resources>
)

CreateResourceFromFile(Macro, Core.NetworkClearText)

'AddPermission(android.permission.GET_ACCOUNTS)
AddPermission(android.permission.ACCESS_WIFI_STATE)
AddPermission(android.permission.ACCESS_FINE_LOCATION)

AddPermission("android.permission.ACCESS_COARSE_LOCATION")
AddPermission("android.permission.ACCESS_NETWORK_STATE")
AddPermission("android.permission.CHANGE_NETWORK_STATE")
AddPermission("android.permission.ACCESS_COARSE_UPDATES")
AddPermission("android.permission.READ_PHONE_STATE")

AddPermission(android.permission.REQUEST_INSTALL_PACKAGES)
AddPermission(android.permission.INTERNET)


AddManifestText(<uses-feature android:name="android.hardware.location.gps"/>

AddManifestText(
<uses-permission
  android:name="android.permission.BLUETOOTH"
  android:maxSdkVersion="30" />
<uses-feature
 android:name="android.hardware.bluetooth" android:required="false"/>   
)   

AddManifestText(
<uses-permission
  android:name="android.permission.BLUETOOTH_ADMIN"
  android:maxSdkVersion="30" />
 )       

'AddPermission("android.permission.BLUETOOTH")
'AddPermission("android.permission.BLUETOOTH_ADMIN")
AddPermission("android.permission.BLUETOOTH_CONNECT")
AddPermission("android.permission.BLUETOOTH_ADVERTISE")
AddPermission(android.permission.BLUETOOTH_SCAN)
AddPermission(android.permission.BLUETOOTH_PRIVILEGED)

SetApplicationAttribute(android:allowBackup, "false")

AddActivityText(main, <intent-filter>
    <action android:name="android.hardware.usb.action.USB_DEVICE_ATTACHED" />
 <action android:name="android.hardware.usb.action.USB_ACCESSORY_ATTACHED" />
</intent-filter>
    <meta-data android:name="android.hardware.usb.action.USB_DEVICE_ATTACHED"
        android:resource="@xml/device_filter" />
        )   
        
AddPermission(android.permission.RECEIVE_SMS)
AddReceiverText(SmsService,
<intent-filter>
    <action android:name="android.provider.Telephony.SMS_RECEIVED" />
</intent-filter>)

AddManifestText(
<uses-permission
  android:name="android.permission.WRITE_EXTERNAL_STORAGE"
  android:maxSdkVersion="18" />
)       


AddReceiverText(newinst2,
<intent-filter>
<action android:name="android.intent.action.MY_PACKAGE_REPLACED" />
</intent-filter>)

' Starting from Android 7 (API 24) we pass a file uri using a FileProvider
AddApplicationText(
  <provider
  android:name="android.support.v4.content.FileProvider"
  android:authorities="$PACKAGE$.provider"
  android:exported="false"
  android:grantUriPermissions="true">
  <meta-data
  android:name="android.support.FILE_PROVIDER_PATHS"
  android:resource="@xml/provider_paths"/>
  </provider>
)

'new external-files-path ensures compatibility with NB6
CreateResource(xml, provider_paths,
<paths>
   <files-path name="name" path="shared" />
   <external-files-path name="name1" path="shared1" />
</paths>
)

AddManifestText(<uses-permission
    android:name="android.permission.WRITE_EXTERNAL_STORAGE"
    android:maxSdkVersion="19" />
)

 

[Erel]

Make sure to sign the app with your own signature key.

 

[JohnC]

My guess would be the "android.provider.Telephony.SMS_RECEIVED" permission in the manifest.

Try temporarily commenting it out and see if the warning goes away.

 

[Pesciolina]

Make sure to sign the app with your own signature key.

Even if I don't publish the app in the store, do I have to create a key on Google?

 

[Erel]

Yes.

 

[Pesciolina]

Where can I find the procedure for creating the key and inserting it into the App?

 

[Erel]

Create a new key with Tools - Private Sign Key. Make sure not to lose the key.

 

[Pesciolina]

I recompiled with the key, is it correct that before installing the app I have to uninstall the previous one?

 

[Erel]

Yes.