Researchers have detect a new malware that has infect more than 100 apps on Google Play Store. Security researchers at Doctor Web, in collaboration with BleepingComputer, have recently identified a new spyware call as ‘SpinOK‘ which has infect over 100 applications available for download on the Google Play Store.
What makes this discovery particularly alarming is that these compromise apps have had a staggering total of over 400 million downloads.
Researchers have discover that this trojan malware disguises itself as an advertisement SDK and appears to be legitimate by offering minigames with daily rewards to attract users.
So, when downloaded, the malware steals private data stored on users devices and sends it to a remote server.
As per Doctor Web report :
“On the surface, the SpinOk module is designed to maintain users’ interest in apps with the help of mini-games, a system of tasks, and alleged prizes and reward drawings,”.
The report further reveals that the infect apps had different levels of malicious content, with some still containing harmful software and others having it in specific versions or being remove entirely from the store.
So, these apps have download 421,290,300 times and this puts a significant number of Android users at risk of cyber threat.
The researchers have alert Google about it, users are also ask to take precautions and stay away from downloading any such apps.
Apps which affected by SpinOK Trojan Malware
Doctor Web report has also revealed the name of all the 101 apps infect with the Android.Spy.SpinOk trojan SDK.
List of the top 10 apps which carry this malware and have the highest number of downloads on the Google Play store :
- Noizz: video editor with music (approx. 100,000,000 installations).
- Zapya – File Transfer, Share (approx. 100,000,000 installations, the trojan module was present in version 6.3.3 to version 6.4 and is no longer present in current version 6.4.1).
- VFly: video editor&video maker (approx. 50,000,000 installations).
- MVBit – MV video status maker (approx. 50,000,000 installations).
- Biugo – video maker&video editor (approx. 50,000,000 installations).
- Crazy Drop (approx. 10,000,000 installations).
- Cashzine – Earn money reward (approx. 10,000,000 installations).
- Fizzo Novel – Reading Offline (approx. 10,000,000 installations).
- CashEM: Get Rewards (approx. 5,000,000 installations).
- Tick: watch to earn (approx. 5,000,000 installations).
Researchers have report the issue with Google and apps have remove from Google Play, still, users are ask to delete these apps if they have already downloaded them.
Also, if they are seeing these apps on the app store, they are advise to update Google Play, including security updates.
It is highly advisable to use antivirus software to protect your device from any such harmful malicious agents.
Also, keep your device up to date with the latest system and security updates as these updates include bug fixes and improve security and addressing existing issues, such as bugs and crashes.
