09-30-2024, 07:58 PM
A virus infected more than 11 million Android devices. Here’s what we know
By Patrick Hearn September 29, 2024 9:39AM
A person holding an Android phone while on a bike. The display shows the Google Play Store.
Bryan M. Wolfe / Digital Trends
According to statistics, it’s expected that people will download 143 billion apps in 2026 alone. That’s a lot of people and a lot of phones, so it’s no surprise that bad actors have pinpointed the Play Store as an ideal distribution center. According to security researchers at Kaspersky SecureList, the infamous Necro malware has been found in Android, with more than an estimated 11 million devices infected.
The estimated download count comes from the researchers taking a look at the different infected apps. There are several that are confirmed infected, including Wuta Camera and Max Browser. There are also WhatsApp mods from unofficial sources that carry the malware, as well as a Spotify mod called Spotify Plus — yes, like the premium service. The report also touches on a number of infected mods for games like Minecraft and Melon Sandbox.
Recommended Videos
According to the report, the malware was part of Wuta Camera from version 6.4.2.148 until its discovery and removal in version 6.4.7.138. Max Browser has since been removed from the app store, but it had been downloaded and installed more than a million times and contained the Necro loader from version 1.2.0 forward.
Security shield on Android phone.
Clker-Free-Vector-Images / Pixabay
The Necro malware is designed to generate revenue for the attacker by running processes in the background of your phone. You might notice a performance hit, but the malware is built to go undetected. In short, it opens and clicks advertisements to create ad revenue, but it does so through invisible windows.
Related
Motorola might be working on another cheap foldable. Here’s what we know
When will my phone get Android 15? Here’s everything we know
We just learned a lot about the iPhone 17. Here’s what you need to know
In an interview with Fox, Google stated that all known infected apps had been removed already and that most users should have been protected by Google Play Protect, the default antivirus on most Android devices.
If you’re concerned that your device might have caught the Necro malware or another nasty bit of software, use a reliable antivirus scanner. There are multiple different antivirus programs available for Android devices, and we have a handy guide on how to remove malware and viruses from an Android phone.
Editors’ Recommendations
What is USB OTG? Here’s how to use USB drives and more on your smartphone
When will my Apple Watch get watchOS 11? Here’s everything we know
Apple will reportedly launch an iPhone Air in 2025. Here’s what we know
Google just announced 7 big Android updates. Here’s what’s new
Android phones may be a lot more expensive in 2025. Here’s why
Topics
News
Android
Google
Tech News
Patrick Hearn
Patrick Hearn
Mobile Writer
linkedin
twitter
Email
Patrick Hearn writes about smart
By Patrick Hearn September 29, 2024 9:39AM
A person holding an Android phone while on a bike. The display shows the Google Play Store.
Bryan M. Wolfe / Digital Trends
According to statistics, it’s expected that people will download 143 billion apps in 2026 alone. That’s a lot of people and a lot of phones, so it’s no surprise that bad actors have pinpointed the Play Store as an ideal distribution center. According to security researchers at Kaspersky SecureList, the infamous Necro malware has been found in Android, with more than an estimated 11 million devices infected.
The estimated download count comes from the researchers taking a look at the different infected apps. There are several that are confirmed infected, including Wuta Camera and Max Browser. There are also WhatsApp mods from unofficial sources that carry the malware, as well as a Spotify mod called Spotify Plus — yes, like the premium service. The report also touches on a number of infected mods for games like Minecraft and Melon Sandbox.
Recommended Videos
According to the report, the malware was part of Wuta Camera from version 6.4.2.148 until its discovery and removal in version 6.4.7.138. Max Browser has since been removed from the app store, but it had been downloaded and installed more than a million times and contained the Necro loader from version 1.2.0 forward.
Security shield on Android phone.
Clker-Free-Vector-Images / Pixabay
The Necro malware is designed to generate revenue for the attacker by running processes in the background of your phone. You might notice a performance hit, but the malware is built to go undetected. In short, it opens and clicks advertisements to create ad revenue, but it does so through invisible windows.
Related
Motorola might be working on another cheap foldable. Here’s what we know
When will my phone get Android 15? Here’s everything we know
We just learned a lot about the iPhone 17. Here’s what you need to know
In an interview with Fox, Google stated that all known infected apps had been removed already and that most users should have been protected by Google Play Protect, the default antivirus on most Android devices.
If you’re concerned that your device might have caught the Necro malware or another nasty bit of software, use a reliable antivirus scanner. There are multiple different antivirus programs available for Android devices, and we have a handy guide on how to remove malware and viruses from an Android phone.
Editors’ Recommendations
What is USB OTG? Here’s how to use USB drives and more on your smartphone
When will my Apple Watch get watchOS 11? Here’s everything we know
Apple will reportedly launch an iPhone Air in 2025. Here’s what we know
Google just announced 7 big Android updates. Here’s what’s new
Android phones may be a lot more expensive in 2025. Here’s why
Topics
News
Android
Tech News
Patrick Hearn
Patrick Hearn
Mobile Writer
Patrick Hearn writes about smart
