Komoot was falsely flagged as malware

[TobiasBoehm]

One of our users wrote us that Komoot v7.2.2 (https://play.google.com/store/apps/details?id=de.komoot.android) was flagged as malware. We tried to reconstruct the case but without luck. Can you tell us why it was flagged?

 

Kind regards,

Tobias Boehm - Komoot

[mbam_mtbr]

Hi Tobias,

I pulled your app from the Google Play store, and just as you found in trying to reconstruct the case there was no detection found.

Most likely your app was pulled from the Google Play store, decompiled, had malicious/unwanted code added to it, recompiled, and put on a third party site for unsuspecting users to download/install.  Most likely what's being detected is the added malicious/unwanted code.  If you could get more details such as getting the exact app being detected, and what it is being detected as I could give you more information.

This method is pretty commonly used by scammers, and they target popular apps such as yours.

By the way, as a top level mountain bike endurance athlete based in Colorado I'm excited to try out your app for myself.  Looks pretty cool.

Nathan

Mobile Researcher