.png)
According to statistics, it's projected that 143 billion apps will be downloaded in 2026 alone. With such a vast number of people and devices, it's no surprise that attackers target Google Play as an ideal distribution point. Researchers from Kaspersky SecureList have discovered a malware known as Necro on Android devices, with estimates suggesting it has infected over 11 million devices.
This estimated number of infections comes from the researchers’ analysis of the affected apps. Some of the confirmed infected apps include Wuta Camera and Max Browser. In addition, unofficial modifications of WhatsApp, as well as a modified version of Spotify known as Spotify Plus—similar to the premium service—were also carrying the malware. The report also highlights several infected game mods such as Minecraft and Melon Sandbox.
Infected Apps and Details
According to the report, the malware was embedded in Wuta Camera starting from version 6.4.2.148 until it was discovered and removed in version 6.4.7.138. Max Browser was removed from app stores, but it had already been downloaded over a million times and contained the Necro loader from version 1.2.0 onwards.
How the Malware Works
Necro is designed to generate profit for the attacker by running background processes on your phone. While you may notice a slowdown in performance, the malware is built to remain undetected. Essentially, it opens and clicks on ads to generate revenue, doing so through invisible windows.
In an interview with Fox, Google mentioned that all known infected apps have already been removed, and most users should be protected by Google Play Protect, the default antivirus program on most Android devices.
If you're concerned that your device may be infected with the Necro virus or any other malware, it’s recommended to use a trusted antivirus scanner. There are several antivirus options available for Android devices, and we have a helpful guide on how to remove malware and viruses from your Android phone.
Post a Comment
0Comments