No matter how hard Google tries, malicious apps find their ways to enter into Google Play Store. Last week, Malwarebytes Labs found four apps infected with a hidden trojan. All four apps are from the same developer called Mobile apps Group and have over 1 million downloads combined.
Here are the four apps:
- Bluetooth Auto Connect
- Bluetooth App Sender
- Driver: Bluetooth, Wi-Fi, USB
- Mobile transfer: smart switch
If you have any of these apps installed on your phone, delete them now.
Malwarebytes published the report on November 1 and these apps still exist on the play store. The company also noted that these apps have a long history of being infected with different variants of adware. So, it is really hard to understand why the developer is still on the Play Store and the apps have not been deleted yet.
Malwarebytes confirmed that these apps do not show any malicious behavior for a few days after being downloaded on the phone. It opens Chrome tabs in the background even when the phone is locked. After 72 hours, these apps start opening websites with malicious ads in Chrome. In some cases, these apps were also opening phishing pages to steal login details.
