Google Playstore has millions of apps for Android users. There are many apps out there that offer the same services to meet different needs of users. For this reason, Google Playstore is also a breeding ground for cybercriminals.
On the one hand, there are also attempts to target ordinary users to steal their data and extort their money, using malware secretly embedded in apps. Playstore has a security feature called Google Play Protect to scan and detect such apps. However, there are some applications that break through that strict security loop and then create disastrous consequences for the users.
In this way, 12 apps that spread malware have been found. Six of these apps are also available on the Google Play Store. According to a report by BleepingComputer, researchers at cybersecurity firm ESET have highlighted 12 malware apps that contain a remote access trojan (RAT) called VajraSpy.
While six of these apps are officially available for download on the Google Play Store, the other six apps are accessible through third-party app stores. Of these, 11 apps were advertised as messaging apps and one was disguised as a news portal. According to the report, this malware was specifically used to target users in Pakistan.
Once downloaded, these apps spread malware called VajraSpy on the smartphone, which is capable of extracting data including contacts, messages, files, device location and list of installed apps.
List of apps spreading malware: Rafaqat Privee Talk MeetMe Let’s Chat Quick Chat Chit Chat Hello Chat YohooTalk TikTalk Nidus GlowChat Wave Chat
Although most of these apps have been removed from the Google Play Store, cyber security experts suggest that if users currently have these apps installed on their smartphones, they should be deleted immediately to avoid data theft.