Critical Alert: Remove These 25 Android Apps Immediately to Safeguard Your Phone from Potential Compromises
Newly Identified Threat: 25 Android Apps Pose Risks, Unleashing Xamalicious Malware
Security experts have recently pinpointed a series of 25 Android applications capable of wreaking havoc on users' devices. The malicious Xamalicious malware, once infiltrated, seizes control of your device, enabling the installation of additional software and covertly clicking on advertisements to generate revenue for hackers, according to warnings from McAfee, an anti-virus firm.
Initially discovered within 14 applications on the Google Play Store, three of which had already been downloaded on over 100,000 devices, these apps were swiftly removed by Google after McAfee's intervention. While new downloads are no longer possible, those who had previously installed these apps must manually eliminate them from their Android devices—phones, tablets, or Chromebooks—to ensure their safety.
McAfee's data highlights a significant number of installations in the UK, United States, Brazil, Spain, and Germany.
Furthermore, an additional 11 Xamalicious-infected apps were detected outside the Play Store, exclusively accessible to users who manually install software via APK from alternative sources. Consequently, this poses a risk to a smaller number of Android devices.
To remotely install software on Android phones, hackers exploited accessibility features built into Android for legitimate applications. All 25 identified apps persuaded users to grant access to these features during installation. Once approval was granted, the malicious apps discreetly concealed on-screen elements, making it difficult for users to detect any abnormal activities as the harmful code initiated the installation of new apps or clicked on ads to enrich cybercriminals.
McAfee experts caution against using apps that request accessibility services unless a genuine need is evident. They advise users to remain vigilant if a new app prompts activation of accessibility services without a valid reason, urging them to bypass operating system warnings—an unmistakable red flag.
Google employs stringent measures, such as Google Play Protect, to keep malware at bay in its Play Store, scanning a colossal 125 billion apps daily across Android devices. This system aims to provide users with a secure environment for app installations, safeguarding against malware and unwanted software threats.