Android Spyware Lurking in Google Play for Two Years: 32,000 Devices Infected
An undetected variant of the Mandrake malware hid in the Google Play app store for two years, infecting over 32,000 devices through apps like Wi-Fi file sharing and cryptocurrency tools. Despite its advanced evasion techniques, Google finally removed the malicious apps after Kaspersky’s discovery.
Hot Take:
Who knew you could get more than just your horoscope from an astronomy app? Mandrake’s back, and it’s out to prove that even spyware can have a glow-up! Google Play, you had one job…
Key Points:
- New variant of Mandrake malware found in five Android apps on Google Play.
- Apps collectively had over 32,000 downloads and were available for about two years.
- Malware hid in apps related to Wi-Fi sharing, astronomy, gaming, cryptocurrency, and logic puzzles.
- Mandrake uses advanced evasion techniques like OLLVM and certificate pinning.
- Most downloads came from Canada, Germany, Italy, Mexico, Spain, Peru, and the UK.
Already a member? Log in here