The app in question is VivaVideo, a free video editor by the chinese developer QuVideo Inc.. VPNpro researchers have taken a look at that app and soon found out that its installation requires a disturbing number of access authorizations, up to and including user’s localization and contact list. It was not long before VPVPro have found out that the app is infected with AndroRAT, malware whose purpose is to remote control Android OS devices.

At the moment, VivaVideo’s apps are still available on Google Play Store, but that will probably not last. P.S. QuVideo is also available from Apple Store but, according to VPNPro, that version of the app is secure.