Android users are being warned over downloading popular apps over fears that they could contain invasive malware. It means unwitting users could be signed up to expensive subscription plans.
Since 2020, over 190 Android apps with a strain of malware dubbed 'Harly' have been installed with the bug, the Express reports. The malware was discovered by anti-virus provider Kaspersky.
It has been named Harly due to its similarities to another infamous Android malware - Joker. The malware is said to be capable of signing Android users up to expensive subscription services without them realising it by obtaining text message security codes.
Once stolen, these can then be used to sign Android users up for subscriptions without their knowledge. Harly can also verify a subscription via a phone call and make sure a victim doesn't realise this has happened.
Kaspersky said: "Since 2020 more than 190 apps infected with Harly have been found on Google Play. A conservative estimate of the number of downloads of these apps is 4.8 million, but the actual figure may be even higher.
"Just like the Jocker Trojans, Trojans in the Harly family imitate legitimate apps. So how does it work? The scammers download ordinary apps from Google Play, insert malicious code into them, then upload them to Google Play under a different name. The apps may still have the features that are listed in the description, so the users may not even suspect a threat."
Kaspersky highlighted a number of Play Store apps that Android users need to look out for, some of which have been downloaded hundreds of thousands of times. While the below apps have all been removed from the Play Store, users should make sure they are deleted from devices if already installed:
- Pony Camera - Over 500,000 downloads
- Live Wallpaper&Themes Launcher - Over 100,000 downloads
- Action Launcher & Wallpapers - Over 100,000 downloads
- Color Call - Over 100,000 downloads
- Good Launcher - Over 100,000 downloads
- Mondy Widgets - Over 100,000 downloads
- Funcalls-Voice Changer - Over 100,000 downloads
- Eva Launcher - Over 100,000 downloads
- Newlook Launcher - Over 100,000 downloads
- Pixel Screen Wallpaper - Over 100,000 downloads
How to stay safe when downloading apps
Always pay close attention to the reviews for the app - you may find write-ups from other Android users who already have fallen victim to a scam and are alerting others to it. It is also best practice to look into the developer of an app you're thinking of downloading and only trust reputable, well-known names.
Having a good anti-virus app installed on your Android device can also help you stay clear of threats and malware. When downloading an anti-virus app make sure you choose an official app from a trusted provider.
Sometimes devious scammers have even released fake free anti-virus apps that won't keep your device safe and will harm it instead.
