Google has warned Android users to delete five apps immediately after banning them from the Google Play store to protect users' data.
Security experts at Malwarebytes discovered the dangerous software listed on the Google Play store, which was loaded with malware that directed users to websites where data could be stolen, reported The Mirror. The apps were all released by a developer called the "Mobile apps Group",the Express reports.
The most popular app released by the developer on the Play Store was Bluetooth Auto Connect. The app had released back in October 2020 and was downloaded more than a million times.
The other apps were Bluetooth App Sender, Mobile transfer: smart switch and Driver: Bluetooth, Wi-Fi, USB. The four apps have now been removed from the Google Play store, but those users who downloaded them before they were delisted are being urged to delete them from their Android device as soon as possible.
At the same time, according to the security team at Bitdefender, an application called X-File Manager was able to avoid Google's strict rules by not featuring anything sinister when appearing on the Play Store.
Once installed onto a device, a pop-up message appears warning that the application needs a vital update. Instead of this upgrade coming via the official Play Store, phone owners are taken to third-party websites where malware is then deposited onto the device.
At this point, spam phishing websites would begin to appear on a victim's device.
According to Malwarebytes, the malicious apps begin opening phishing sites in Chrome. The content of this would vary. While some were harmless sites used simply to produce pay-per-click.
Others were more dangerous phishing sites including adult content which would lead to a phishing page telling the user they've been infected, or needed to perform an update.
"The Chrome tabs are opened in the background even while the mobile device is locked. When the user unlocks their device, Chrome opens with the latest site.
Malwarebytes said: "A new tab opens with a new site frequently, and as a result, unlocking your phone after several hours means closing multiple tabs. The users browser history will also be a long list of nasty phishing sites."
Although the apps no longer appeared on the Google Play Store, those who had already downloaded them would need to delete them to keep their Android device safe.
