Hundreds of Android Apps with over 420 million Downloads found Infected with Malware

Bangalore (India), 4th June 2023: An Android software module, disguised as a mini-game, is actually malware that collects information from mobile phone files and can send it to cyber criminals. Furthermore, malware analysts discovered the spyware in 101 apps with over 420 million downloads.

Android.Spy is the name of the app.SpinOk is a marketing software development kit (SDK) that is deployed as spyware. According to a Dr Web study, developers can embed it in a variety of apps and games, including those available on Google Play.

The report said, “On the surface, the SpinOk module is designed to maintain users’ interest in apps with the help of mini-games, a system of tasks, and alleged prizes and reward drawings.”

The report added, “Upon initialisation, this trojan SDK connects to a C&C server by sending a request containing a large amount of technical information about the infected device.

The spyware also takes precautions to modify its running pattern in order to escape detection by security researchers.

Cyber crooks can use the malware to retrieve a list of files on the phone, validate the presence of a specific file or directory on the device, and even duplicate or substitute clipboard contents. Doctor Web experts discovered this spyware module and numerous variants of it in a number of apps published through Google Play.