Despite Google's efforts to make Play Store a safe place for Android users, cases of Fraudulent applications that manage to gain a foothold in the official storeWith the risks for users that this implies. Recently, the malware In Play Store, he again has news, forcing the company to erase several hundred malicious applications from his store.
The objective of cybercriminals is to extend their fraudulent applications in the Google store for Reach as many victims as possible. Although the use of Google Play Protect and pay attention to what we install on mobile, we must not have major problems, cases of malicious applications discovered in recent weeks remind us of the need for extreme precautions.
He malware It's always a usual problem in the Google store
At the beginning of March, the threat laboratory of the Integralad advertising company echoes a vast fraud program that used false applications to fill the mobiles of users with advertisements. The company has identified more than 180 applications of this style Since 2024 have constantly displayed full screen video advertisements.
Applications discovered by the company They have accumulated more than 56 million downloads Diario has already generated a total of 200 million fraudulent advertising offers. The goal of the crooks was to generate income through announcements via applications that have done nothing. Fortunately, Google has confirmed the elimination of all applications discovered by Integralads.
Only a few days later, Bitdefender researchers said the number of malicious applications would be much higher. According to the company, There would be at least 331 fraudulent requests With more than 60 million downloads. Applications were of different types, from QR code readers to expenditure managers, via health applications or wallpapers.
By leaving the above, the Banque Populaire Trly Anatsa (also known as Teabot) returned to Google Store Camouflaged in the form of a file manager and a document player called “document reader – file manager”. The application was discovered by the Zscaler Cybersecurity Company, which indicates that the application has accumulated more than 220,000 downloads. Once installed, The Troy has stolen information from the bank of its victims. Google has also eliminated the application of this store.
The Trojan Anatsa Bancaire is already an old acquaintance and we speak for the last time in June of last year, when Google withdrew more than 90 malicious requests from its official store. Among the different types of malware This banking Trojan horse contained the requests removed by the company. As on this occasion, Cybercouts distributed it hidden in documents of documents and even in a QR code reader.
Another of the most recent cases was discovered by a group of researchers. It's Kospky, camouflaged spy software in a file management application and Designed to spy on your victims. Kospky is able to record the mobile time location, access the content stored on the device, save audio, take photos and videos and save the keys on which we click on the keyboard. According to the researchers, it seems to be linked to two North Korean groups. Discovered applications are no longer in play store.
At this point, it is important to take into account the risks we face when downloading the applications that we do not know, especially if we do it via external sources to play store. Even when you download applications from the official Google store, we could end the infected mobile, so it is practical for precautions and Download only the reliable applications and which we trust.
From Xataka Android, we contacted Google and update the article as soon as we have an answer.
Cover image | Microsoft designer images creator
In Xataka Android | What is malicious software, what guys are there and what can you do if your mobile infected you
In Xataka Android | The big anti-theft mode officially arrives in all Android mobiles: so that you can activate it now
