A new Android Trojan could be targeting your brand-new device. Even more terrifyingly, it was distributed on the Google Play Store. The virus is posing as innocent apps related to health, games, horoscope, and productivity. Google has removed those apps from the Play Store, but not before they were reportedly downloaded by hundreds of thousands of users worldwide, and they could still be lurking on the web.
The Xamalicious Trojan uses innocent apps to bypass your accessibility features. It then takes over your phone using features that are normally locked down to take control of your device. Specifically, the Trojan scans your device for any information it can use in a hack: your OS, location, contacts, passwords, and more. It then executes a code to take over your device and take your information.
So far, the virus has been attached to 13 apps on Google Play that have since been deleted. Google removing an app from its store doesn’t delete it from your device. If you have any of the following apps installed, delete them immediately:
- Step Keeper: Easy Pedometer
- Track Your Sleep
- Essential Horoscope for Android
- 3D Skin Editor for PE Minecraft
- Logo Maker Pro
- Auto Click Repeater
- Count Easy Calorie Calculator
- Sound Volume Extender
- LetterLink
- Numerology: Personal Horoscope & Number Predictions
- Sound Volume Booster
- Astrological Navigator: Daily Horoscope & Tarot
- Universal Calculator
The virus doesn't work alone either. McAfee researchers found a link to another app called Cash Magnet, which can be installed by Xamalicious. That app automatically clicks ads, installs apps, sends messages, and other actions to fraudulently steal money.
If you have questions or need assistance, contact a member of the Admiral team.
