The Google Play Store is reportedly riddled with Trojans and malware-infected apps that siphon off secret information and money from unsuspecting victims.
Cybersecurity researchers at Dr. Web recently examined the state of the mobile app store and found that the number of Trojan-laden apps (supposedly legitimate apps that carry Trojans, either directly in the code or through "updates") " or "add-ons") is "tip".
In most cases, the compromised apps are cryptocurrency wallet and management apps, investment app clones, or photo editors. Although Google has already managed to remove most of the apps from the store, some have persisted, with one of the apps on the list, Top Navigation, still free on the Play Store at the time of publication.
This app, as well as another one from the same developer, called Advice Photo Power, has been downloaded more than XNUMX times, although users don't seem too happy with the apps, judging by the reviews.
Bypass Google defenses
When not stealing proprietary data, these apps load affiliate service sites or trick people into activating paid subscriptions.
But getting a malicious app into the Google Play Store and sustaining it is quite a difficult task. Hence, hackers also use other online communities, such as sites, discussion forums or social networks, to distribute the applications.
Dr. Web's report asserts that one of the biggest threats this year, multiple WhatsApp hacks, was distributed in this way. These modifications include GBWhatsApp, OBWhatsApp or WhatsApp Plus, which claim to offer support for auxiliary languages, home screen widgets, call blocking or other functions that are not available in the current application.
Once installed, certain of these apps will still download auxiliary malicious APKs, claiming that they are downloading an update.
To protect Android device from various threats, users should avoid downloading apps from third party sources, always make sure to read comments and reviews before downloading any app from Play Store, pay attention to permissions that are asked in each and every new app, monitor any unexpected battery drain and monitor any online purchases made by multiple mobile apps, scholars warned.
Via: BleepingComputer