Google’s Play Store security has come under scrutiny after 77 malicious apps were found with over 19 million downloads, according to a cyber security firm. These apps, disguised as utilities and personalization tools, carried advanced malware strains targeting banking and crypto platforms.
Anatsa Trojan Makes a Comeback
The most dangerous malware was an updated variant of the Anatsa banking trojan, active since 2020. The new build features a keylogger for password theft, SMS interception, and anti-detection tools. A cyber security analyst firm reports that Anatsa is targeting 831 financial institutions worldwide, including cryptocurrency exchanges and traditional banks.
The trojan uses advanced evasion tactics. It downloads code in segments, each encrypted with different DES keys, and dynamically hides its payload in JSON files. Once executed, the files delete themselves, making detection harder.
https://the420.in/data-protection-dpdp-act-cdpo-course-hundreds-enrol-fcrf-dpdpa/
Google’s Security Measures Questioned
The firm said the apps used corrupted archives with invalid compression and encryption flags, bypassing standard malware checks. The malware runs normally on Android devices despite failing static scans. Attackers trick users into granting elevated permissions, allowing the trojan to operate without suspicion.
The Joker malware family, active since 2020, remains the most common threat, responsible for 25% of infections detected. Joker primarily steals credentials through SMS interception.
Google stated it has removed the malicious apps and implemented additional protections. However, experts question why Google’s security failed to detect these threats before they reached millions of users.
Apple has also faced similar issues. In April, Kaspersky found ComeCome malware on the App Store, designed to drain crypto wallets.
Cybersecurity experts urge Android users to download apps only from verified developers, avoid unnecessary permissions, and enable Play Protect.
About the author – Ayush Chaurasia is a postgraduate student passionate about cybersecurity, threat hunting, and global affairs. He explores the intersection of technology, psychology, national security, and geopolitics through insightful writing.