Hello, I recently switched to installing all my apps through Obtainium by getting the APKs directly from Github or the like, mostly to move away from F-Droid and Aurora Store security issues I feared. Browsing the forum, I noticed a post about two months back about Signal showing up as a Trojan (TROJ_GEN.R002V01KD23) with TrendMicro-HouseCall. I checked it again, and have noticed the same detection popping up with the latest version (6.41.3). The scan is linked below.
https://www.virustotal.com/gui/file/83b1513e154f59de098bf7f44b918278d3629d124aec6ff49ee637043c8dcc65
I'm just wondering if this is simply a false positive and nothing to worry about? Especially as I've seen that many users here make use of Signal and it is a decently reputable app amongst the privacy community. My reason for this post is I haven't seen it discussed much anywhere else.
Furthermore, I decided to scan the APKs of a few other of my apps; a music playing app and flashcard app I've been using for a while as well.
For Auxio, the music-playing app, the version is 3.2.1 and also was marked just by TrendMicro, but with a slightly different Trojan version (TROJ_GEN.R002V01KC23). Link is https://www.virustotal.com/gui/file/1f93ae1be67b8c74ce8ecff762decaf93ed8e4f7d58d2a9a49fa2a2a218ca2b1/detection.
For the flashcard app (ForgetMeNot), version (1.9.0), it was marked by MaxSecure as having some form of malware? (Android.W32.Bray.n). Link is https://www.virustotal.com/gui/file/5412f708562367d50e620a4900125c04d9d4d26311124b2015b205832d50c38a.
Both of the apps were downloaded from their original sources on github.
Now, this is no security report, and I am a complete beginner in this stuff, despite using GOS for a few years now, so my questions are, are these simply false positives, especially since only one security company marks them? The two additional apps mentioned before require minimal permissions and I have never had issues with them, however a detection on VirusTotal is usually something I pay lots of attention to. All in all, I would really appreciate it if perhaps somebody could give some insight on this and put my mind at rest? I'm also interested in knowing how some of the people here usually approach installing APKs, is it a normal custom to scan it with a tool such as VirusTotal?