Google Play Store Saw Over 600 Million Malware, Malicious App Downloads in 2023: Kaspersky

These infected apps include mini-game ads that collect user data, Minecraft clones, aps that promise monetary rewards, and more.

Written by Manas Mitul, Edited by Siddharth Suvarna | Updated: 13 November 2023 13:02 IST

Google Play Store Saw Over 600 Million Malware, Malicious App Downloads in 2023: Kaspersky

Photo Credit: Reuters

Google Play hosts over three million apps

Highlights

Google Play saw 25 million downloads for malicious Minecraft clones
Chinese spyware apps had over 1.5 million downloads
Apps with mini-game ads that harvest data had over 451 million downloads

Google boasts of robust security rules for its Play Store, promising safe downloads and strict action against malicious apps for users. But, with millions of applications hosted on the store front, there's also a considerable amount of malicious content that can harm Android users. Now, prominent cybersecurity and anti-virus firm Kaspersky has claimed that Android users downloaded malware from Google's Play Store over 600 million times in 2023. These infected apps include mini-game ads that collect user data, Minecraft clones, aps that promise monetary rewards, and more.

According to a report compiled by Kaspersky, citing various other reports and sources, malicious developers have found new ways to bypass Google's security checks to list their apps on the Play Store. The firm found different kinds of infected content and applications downloaded via the storefront, that pose a serious security threat to Android users. The biggest defaulter turned out to be suspicious apps with in-app mini-game ads that harvest data, with over 451 million downloads. According to the report, a malware called SpinOk was found infecting over a 100 apps on the store this year, showing up as in-app mini games promising monetary rewards while collecting user data.

The report also noted over a 100 million downloads for apps infected with hidden ads and over 35 million downloads for ad-riddled clones of the popular game Minecraft. Thirty-eight Minecraft clones with hidden adware were found on Play Store this year, the report said. Mojang's Minecraft, a sandbox-style survival game, has over 50 million downloads on the Play Store and is thus a major target for bad actors.

[Sponsored] Samsung Galaxy S24: The Ultimate Camera Phone With Smarter On-Device AI

Additionally, suspicious apps that promise monetary rewards also racked up 20 million downloads. These primarily include apps posing as health and activity trackers that promise lucrative rewards for completing physical activity goals. The report also mentioned over 40 apps, which were downloaded 2.5 million times, infected with background adware.

Two file manager apps with a total of 1.5 million downloads were also found collecting user data, despite claiming that they don't do so. These spyware apps were reportedly sending key user data like contacts, location, photos, audio, video and more to servers in China.

Kaspersky experts also found Play Store apps infected with the Fleckpe subscription Trojan. These apps, when downloaded and run, would install a malicious payload on the user's smartphone that collected country and cellular operator information. The malware then opened Web pages with paid subscriptions in the browser and maliciously subscribed the user to services.

This Malware Targets iPhone Users via iMessage, Extracts Private Data

The report also mentioned 50,000 downloads of an iRecorder screen recording app for Android. The app, which was uploaded to the Play Store in 2021, comes with a malicious code that makes the app record sound from the smartphone microphone every 15 minutes and send to the server of the developers.

Earlier this year, Kaspersky had found a cybersecurity threat that targeted iPhone users via a malicious iMessage attachment. The threat didn't require users to do anything and utilised an iOS vulnerability to install a spyware that took complete control of device and user data.

From the launch of the Infinix GT 10 Pro to Amazon's latest mega-sale, we discuss the most noteworthy technology news events of the week on the latest episode of Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Further reading: Google, Google Play, Play Store, Malware, Apps, Android, Kaspersky

Manas Mitul

Email Manas Mitul

In his time as a journalist, Manas Mitul has written on a wide spectrum of beats including politics, culture and sports. He enjoys reading, walking around in museums and rewatching films. Talk to Manas about football and tennis, but maybe don’t bring up his video game backlog. More