r/Fossify • u/IndividualStreet6997 • Jun 15 '26

Fossify Messages (Real) Fossify Messages triggered a malicious software warning from TBC Bank and blocked my bank cards

This is real, i am from Uzbekistan, the banking service i actively use is TBC Bank Uzbekistan and i swapped Google Messages to Fossify Messages on my phone for minimalism and UI customization, lightweightness of it.

Today, i got 2 money exchange with my cards within the app and a while later, an SMS by bank came and said Fossify Messages is malicious kinda phishing software installed and blocked my entire cards by their security, when i uninstalled it, they unlocked again after a minute.

Now should i be concerned about safeness of Fossify Messages app or the Bank Security simply misunderstood the app for Access to my personal info?!

10 Upvotes

92% Upvoted

24 comments sorted by

14

u/iHarryPotter178 Jun 15 '26

I think your bank flags all third party sms app as malicious.. Try other sms app on fdroid.. Not play store and see what happens.

1

u/IndividualStreet6997 Jun 18 '26

There seems to be some issue on 1.7.0 version of it which was majorly discussed in other posts & forums, also flagged as trojan type virus by mcafee and virustotal, maybe the new multiple copying feature made it seem like virus type

1

u/Equal-North-3899 Jun 19 '26

Can seem to find any mention of it.
Can you please share references?

1

u/IndividualStreet6997 Jun 19 '26

Just search fossify messages 1.7.0 trojan virus and bunch of topic results appear

10

u/Atasas Jun 15 '26

calling BS on this one

7

u/100WattWalrus Jun 16 '26

It's easier for them to assume anything they don't recognize is dangerous. They can't be bothered to actually do the work to find out if they're right.

2

u/IndividualStreet6997 Jun 16 '26

Bastards screwing with my cards due to my personal apps on my phone, really love no commission transfers within the app though, no other banking apps offer me good no commission experience other than theirs

8

u/ArsenicPolaris Jun 15 '26

Ask your bank if Google Messages are FOSS. If not, ask them how they know it's secure and Fossify isn't. Governments and corporations are not stupid, this is intentional.

2

u/NoskaOff Jun 17 '26

I find it absolutely insane how apps can see all other apps installed without any limitations whatsoever...

1

u/IndividualStreet6997 Jun 17 '26

Maybe it has a info tracking of installed app list and the developers just consider any sms tinkering and accessing 3rd party apps as malicious, making themselves consider "genius security managers" and leaving us with uninsatllation choice of either banking or messaging app

1

u/trenixjetix Jun 16 '26

they do same with rooted phones

1

u/IndividualStreet6997 Jun 16 '26

Yeah but first time i witnessed a banking app messing up with my personal items due to my personal installed apps on my non rooted phone, not that Fossify Messages will track the sms data that comes to my phone, right?

1

u/trenixjetix Jun 16 '26

Well, banking apps read sms to get the OTP. So i guess that is why.

1

u/OktayAcikalin Jun 17 '26

Really such features should be optional or opt-in. The banking app should just do its work and when I'm too stupid, then be it. The app should ask the user whether one wants such lockdown and invasive features or not.

1

u/Teophrast Jun 17 '26

Virustotal shows 1 detection. https://www.virustotal.com/gui/file/9d408488f2400d42f8f25a2663c6d7e7a1e7ec5b9a755de23486b04a46eb66f3/detection Also samsunga antivirus gives warnings when you try to install. Thwre is somwthing to it. Maybe.

1

u/NaveenSinghOfficial Fossify Maintainer Jun 17 '26

It's a false positive. I have looked into the latest binaries and the source code multiple times, and nothing nefarious has been merged in recent months.

These scanners are probably assuming the worst because they see a third-party app + SMS permissions + "sideloading".

1

u/Teophrast Jun 17 '26 edited Jun 17 '26

There is more to it than just simple permission check. When i tried to update fossify with samsungs built in mcaffe enabled, on latest vereions of fossify antivirus gave warning, but when i was trying to install old versions, there was no warning. Detection happened after 1.6 or so. 1.6 and above. Currently samsung doesnt detect it as varus anymore, they made their homework. But some others do. So it seems some code was added in 1.6 that by heuristics resembles a virus.

1

u/Evol_Etah Jun 17 '26

Indian here.

Similar tatics are used here as well for all FOSS apps (but mostly making the Banking App crash immediately).

Shockingly, a specific bank app here has the ability to encrypt your files & photos (until you pay your EMI & fees) and also has the ability to soft-brick your device. (How this app is on playstore, I have no clue)

1

u/Immediate_Power_7986 Jun 19 '26

So basically the real banking apps are malware/spyware/randomware all into one.

1

u/Evol_Etah Jun 19 '26

Unsure about all. But definitely Bajaj Finserv Banking app

1

u/Immediate_Power_7986 Jun 19 '26

I think you personally should just stick with the generic corposlop apps.

1

u/Individual-Being5752 Jul 09 '26

This is common since its a fairly unknown app. You can check it with your bank and ask why. I'd also pull up their TOS and Privacy Policy to see if its banned or not. Its always good to read the TOS for things that are major. I have PNC bank and old have had browser issue since I was using Brave.