The malware has been discovered by cybersecurity researchers at McAfee who reported them to Google. The apps are no longer available on Google Play – but users who’ve already downloaded the apps will still be infected unless they uninstall them. The apps are designed to look like utilities including flashlights, QR code readers, camera enhancers, unit converters, task managers and more. The apps contained clicker malware - malware which secretly runs in the background and clicks on illicit advertising links to generate ad revenue. While clicker malware might not be as dangerous to users as malware which steals passwords or bank details, it still causes disruption by draining the battery or using up mobile data. The latter could cost victims money if it takes them over their data allowance and they’re charged for it. Also: How to keep your bank details and finances more secure online Some of the apps which have been identified as delivering clicker malware include apps called currency converter, image vault, camera and more. The full list including package names has been detailed by the McAfee mobile research team. Some of the applications have been individually downloaded by millions of Android users. For example, one app installed by over 5 million users claimed to enable them to find apps which eat a lot of data, although of course the malware inside the app was exactly the sort of thing that would uses up data. To avoid being detected, the malware delays initially starting the malicious activity for at least an hour and after that it detects whether the user is actively using their device or not, so the malicious activity doesn’t take place when the device is being looked at. It’s recommended that users who’ve installed apps listed as containing clicker malware uninstall them as quickly as possible. “Once you remove this and other malicious applications, you can expect an extended battery time and you will notice reduced mobile data usage while ensuring that your sensitive and personal data is protected from this and other types of threats,” said McAfee’s SangRyol Ryu. A Google spokesperson confirmed that the malicious applications are no longer available on Google Play. MORE ON CYBERSECURITY
Here are the top phone security threats in 2022 and how to avoid themAndroid security: How this new malware has become a top smartphone threatThis cruel Android malware wipes phones after stealing moneyOver 300,000 Android users have downloaded these banking trojan malware apps, say security researchersBe careful what you download: 17 password-stealing Android apps removed from Google Play
