Researchers claim malware is rife on the Google Play Store

Image credit: Shutterstock (Image credit: Shutterstock)

Indian cybersecurity company CloudSEK has revealed what is describes as the “concerning discovery of widespread malware infection” in the Google Play Store affecting millions of Android users across the globe.

In a press release, the company announced the identification of 193 applications on the Play Store that are infected with the Android.Spy.SpinOk SDK, 43 of which are still at large on the Android app store.

CloudSEK reckons that these have amassed more than five million downloads. The security firm also estimates that 30 million users in total have been affected by the bad apps it has found. These are in addition to other similar apps previously identified by DrWeb.

Android apps affected with malware

Topping the list of the affected apps with the most installs is HexaPop Link 2248, followed by Macaron Match, Macaron Boom, Jelly Connect, Tiler Master, Crazy Magic Ball, Bitcoin Master, Happy 2048, and Mega Win Slots. Of these apps, three are developed by CM Studio and two by Zhinuo Technology Co., Ltd.

> These are the best identity theft protection tools around

> Google blocks Pinduoduo apps from Play Store over malware fears

> Cybercriminals can pay $20k to spread malware on the Google Play store

The majority of the apps, according to the report, belong to the casual gaming category, which are often downloaded and used briefly before being left to reside on a user’s device indefinitely.

Credited with initially sounding the alarm about apps infected with the malicious SDK, DrWeb explains it has the ability to collect information on local Android files which is then transferred to the threat actors. Users’ clipboards are also affected, potentially exposing passwords and other sensitive information.

CloudSEK is advising Android users to download protective measures like antivirus software from trusted providers to monitor and flag potential threats. Of a similar nature, smartphone users are being urged to maintain vigilance when browsing their device’s app store, and to look out for potential red flags.

A Google spokesperson told TechRadar Pro: "The safety of users and developers is at the core of Google Play. We have reviewed recent reports on SpinOK SDK and are taking appropriate action on apps that violate our policies. Users are also protected by Google Play Protect, which warns users of apps known to exhibit malicious behavior on Android devices with Google Play Services, even when those apps come from other sources."

Protect yourself with the best endpoint protection and best firewalls

With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!