Google has removed 17 apps from its Google Play store due to malware known as Joker.
The Joker malware family is infamous for constantly targeting Android devices. Even though Google is very much aware of this cyber threat, it manages to keep finding its way into their official application market. It accomplishes this by changing its code, execution methods, or payload-retrieving techniques.
A Zscaler research team has been monitoring Joker malware and notified Google of the recent uploads to the Google Play store. Here is what they had to say about the malware itself:
"This spyware is designed to steal SMS messages, contact lists, and device information along with silently signing up the victim for premium wireless application protocol (WAP) services."
The research team identified 17 different samples uploaded to the store in September 2020. In total, there were around 120,000 downloads of the affected apps.
Here is a list of the apps removed from the Google Play store:
Security researchers are making some recommendations for those who use these apps or the Google Play store:
"We recommend paying close attention to the permission list in the apps that you install on your Android device. Always watch out for the risky permissions related to SMS, call logs, contacts, and more."
They also recommend you read the comments and reviews on the app page, which can help identify infected apps.