September 23, 2024 at 12:06PM
Two apps with a total of approximately 11 million downloads from Google Play were found to be infected with the Necro trojan by Kaspersky. The malware was distributed through these apps and unofficial versions of popular apps and games. The trojan can perform various malicious actions, targeting users in several countries. Google has been contacted for a statement.
Based on the meeting notes, it has been discovered that two applications in the official Google Play store, Wuta Camera and Max Browser, were infected with the Necro trojan, impacting millions of downloads. The malware’s new variant spreads through both Google Play and modified versions of popular apps from unofficial sources. Necro was found in unofficial mods for Spotify, WhatsApp, and several games, and it was attributed to the use of untrusted ad integration by the apps’ developers. The malware, capable of executing various malicious activities including ad display, downloading files, installing third-party apps, and redirecting internet traffic, targeted users in Russia, Brazil, Vietnam, Ecuador, and Mexico. Google has been contacted for a statement concerning this issue.