Yet again, apps ridden with nasty malware were found in the PlayStore. Google has faced some serious criticism in recent months as malicious applications have often found a way to get into the Play Store. These sketchy applications witness millions of downloads before being deemed as dangerous and removed subsequently.
The latest culprits happen to be four VPNs and two selfie apps, which have collectively racked up over 500 million installs. These apps contain harmful adware that seeks sensitive system information which according to researchers, can cause serious damage. The VPN apps in question include HotSpotVPN, Free VPN Master, Secure VPN, or CM Security Applock AntiVirus. All these four apps originate in China and bombard users’ with fraudulent ads. The four Android VPNs have been collectively installed more than 500 million times.
“In case of outside ad fraud ads pop up while apps are running in the background or even outside the app environment (e.g. ad views placed on the home screen and covering app icons that users must reach to start new apps). As a user, not only do I think it’s treacherous for a privacy app to abruptly intrude my phone screen, but the constant HTTP requests keep the phone CPU heated and drain phone battery,” researcher Andy Michael wrote in a blog post.
Meanwhile, the two camera apps deemed as a security risk are Sun Pro Beauty Camera and Funny Sweet Beauty Selfie Camera. Both of these apps were identified by security researchers to have racked up more than 1.5 million downloads infecting devices with adware. These camera apps were bombarding screens with full-screen ads and even continued to display ads when the pop-up remained unopened.
Security researchers at Wandera suggest that the permissions requested by these apps can cause more harm than just filling screens with fraudulent ads. These include installing shortcuts, serving fake system alerts, as well as recording audio without user permission.
“Intrusive out-of-app ads interrupt users in the middle of their workflow, brick their devices, drain the device battery, and in some cases, infected devices need to be replaced altogether,” explained security researchers at Wandera.
Naturally, researchers have advised that if any of these apps are installed on your device, you should delete them right away.