- Bitdefender found more than 300 Android -Apps used to display unwanted ads
- Almost all apps have so far been removed from the Play Store
- Some of the apps even tried to steal sensitive data
Hundreds of Android applications, installed millions of times from the Google Play store, were part of a large-scale ad-fraud campaign showing unwanted ads and trying to steal sensitive data from the victims, experts have warned.
CyberSecurity scientists from Bitdefender, who also credited the IAS threat laboratory, said they discovered at least 331 apps available through the Google Play store, which, cumulatively, collected more than 60 million downloads, mostly on older Android variants (Android 13 and older).
Apps mimicked simple tool apps such as QR scanners, expenditure tracking apps, health apps, wallpaper apps and others.
Protecting your Android phone
Most applications first became active on Google Play in the 3rd quarter of 2024, and when Bitdefender’s research was completed, only 15 active remained. The vast majority of victims are located in Brazil, followed by the United States, Mexico, Turkey and South Korea.
When the victims downloaded one of the apps, they first hide their icons for launcher (something that is only possible on older versions of Android). Apps retained “some functionality”, but they are able to display non-of-context ads of other applications in the foreground. Some try to collect user information, credit card data and other information.
Some apps may even start without user interaction, something that shouldn’t be possible, even on Android 13.
While all apps are eventually removed from the Play Store, people who have them installed on their devices remain at risk. If your Android smartphone is strange (hanging, shows ads of various ads, overheating, consumption data while you are inactive), be sure to remove unwanted apps or those you are not actively using.
Furthermore, be sure to use the latest version of Android if possible. Currently, it is Android 15, with the next iteration planned for later in 2025.
