Android warning: Hundreds of harmful Google Play Store apps downloaded millions of times

Android users are being warned after over 200 “harmful” Google Play Store apps were downloaded more than 32million times last month alone.

Android is one of the most popular pieces of software in the world, with it used by more than two billion people each month.

However Android users are no strangers to security alerts, with some recent widespread threats being circulated via apps found on the Goole Play Store.

Six Android apps that were downloaded a staggering 90million times from the Google Play Store were found to have been loaded with the PreAMo malware.

While another recent threat saw 50 malware-filled apps on the Google Play Store infect over 30million Android devices.

And now Android users are being warned once again about Google Play Store apps filled with adware, stalkerware and other such malware.

ESET malware researcher Lukas Stefanko revealed that in July alone 205 “harmful” Google Play Store apps were downloaded over 32million times.

Stefanko categorised the apps under subscription scam, ad fraud, stalkerware, fake apps, fake antivirus tools, adware droppers and software with backdoors.

The apps with the most number of installs had hidden ads, which were installed over 19million times.

While in a tweet Stefanko highlighted that Google Play Store apps with subscription scams had 12million installs.

The malware expert said: “All these apps and numbers are based on research, blogs, reports, and tweets published in July, 2019 by the infosec community”.

In other Android news users of the Google mobile OS were also recently put on alert about a terrifying piece of malware.

Security experts have discovered spyware on Android apps that, at first glance, look just like popular programmes for the Google OS.

However, in actuality these apps are fake and convincing looking versions of popular Android downloads.

The surveillance malware was loaded onto fake versions of Android apps such as Evernote, Google Play, Skype and PornHub.

The fake apps were discovered by Canadian cybersecurity company Lookout, and the apps were reportedly created by a Russian firm.

The St Petersburg-based Special Technology Center had previously been hit by sanctions over the 2016 US election hacks.

Cybersecurity experts discovered the fake apps stole passwords and also turned Android phones into listening devices.

This was done via the Monokle tool which can record home screens of locked Android phones to steal passwords and eavesdrop on calls.

Lookout said: “Monokle appears in a very limited set of applications which implies attacks using Monokle are highly targeted.

“Many of these applications are trojanized and include legitimate functionality, so user suspicion is not aroused.

“Lookout data indicates this tool is still being actively deployed.”

• Stay tuned to Express.co.uk for more Android news

source: express.co.uk