developer accounts Archives

AppWizard

March 25, 2025

Malicious Android Apps Hide in Plain Sight, Target Millions of Devices

A malicious Android app campaign called “Vapor” has been discovered, designed to trick users into revealing sensitive information through misleading ads. This campaign includes various apps posing as utilities, such as QR code scanners and health trackers, with over 60 million downloads collectively. It primarily targets users in Brazil, the United States, and Mexico. Some apps have evaded detection by not showing harmful behavior immediately after installation and by disguising themselves. They use tactics like inundating users with full-screen ads and employing scare tactics to prompt downloads of additional harmful apps. The campaign may be run by a single cybercriminal group or a coalition, utilizing shared malware development tools. Despite Google removing many harmful apps, new variants continue to emerge, highlighting the evolving nature of mobile malware.

AppWizard

March 18, 2025

Malicious Android ‘Vapor’ apps on Google Play installed 60 million times

Over 300 malicious Android applications, identified as adware, have been downloaded 60 million times from Google Play. These apps, part of an operation called "Vapor," have attempted to steal sensitive user information and generate 200 million fraudulent advertising bid requests daily. The campaign was first uncovered by the IAS Threat Lab and has been active since early 2024. A total of 331 malicious applications were identified, with significant infections reported in Brazil, the United States, Mexico, Turkey, and South Korea. Notable offenders include AquaTracker, ClickSave Downloader, Scan Hawk, Water Time Tracker, Be More, BeatWatch, TranslateScan, and Handset Locator, each with varying download counts. The apps disguise themselves as utilities and employ tactics to evade detection, such as disabling their Launcher Activity and creating fullscreen overlays for ads. Users are advised to avoid unnecessary apps from unverified publishers and regularly check installed applications.

AppWizard

March 5, 2025

Google Has Pulled Nearly 200 Apps Due to Extensive Android Ad Fraud Scheme

Google has removed over 180 applications from its Play Store due to a scheme exploiting Android apps for ad fraud, as revealed by Integral Ad Science (IAS). The investigation, initiated in late 2024, identified unusual app behavior and traffic patterns. The operation, named Vapor Threat, involved fraudsters creating shell applications that appeared as legitimate health and fitness tools but were designed solely to generate ad revenue through full-screen video advertisements. IAS emphasized the need for vigilance in the advertising ecosystem and highlighted the ongoing challenges of ad fraud, urging advertisers to adopt robust anti-fraud strategies.

AppWizard

February 4, 2025

Google Relies On AI-Assist Threat Detection to Keep Android Safe

Google blocked 2.36 million apps from being published in 2024 due to violations of Google Play policies and banned over 158,000 developer accounts for attempting to distribute harmful applications. The company prevented 1.3 million apps from gaining excessive access to users' sensitive data. Over 92% of human reviews for harmful apps were AI-assisted, allowing for quicker and more accurate actions. Google implemented new requirements for developers to enhance transparency regarding data handling and introduced a "Data deletion" option for apps. Over 91% of app installations on the Google Play Store utilized the latest protections from Android 13 or newer. Google Play Protect scanned more than 200 billion apps daily and identified over 13 million new malicious apps from outside Google Play in 2024.

AppWizard

February 3, 2025

New Android, Google Play Security Update—2.3 Million Apps Blocked

Google's recent security update for Android and Google Play has led to the blocking of 2.36 million apps that violated policies and the banning of over 158,000 developer accounts attempting to publish harmful applications in 2024. Additionally, security teams prevented 1.3 million apps from gaining excessive access to sensitive user data. Google employs a multi-layered approach to combat harmful applications, following the SAFE principle, which includes safeguarding users, advocating for developer protection, fostering responsible innovation, and evolving platform defenses. The company provides developers with tools, best practices, and training resources to create secure applications. A rigorous review and testing process is in place before apps reach the Play Store, and Google Play Protect offers continuous scanning for malicious behavior.

AppWizard

February 3, 2025

Google can now auto-disable permissions from risky Android apps

Google Play Protect is enhancing security for Android devices by automatically disabling app permissions for potentially harmful applications, preventing access to sensitive information. Users can restore permissions but must confirm their decision, promoting caution. Play Protect scans all apps, including sideloaded ones, and blocks harmful applications based on threat levels, scanning over 200 billion apps daily. It also prevents users from disabling Play Protect during phone and video calls to combat social engineering scams. In 2024, Google blocked 2.36 million policy-violating apps and banned over 158,000 fraudulent developer accounts, introduced live threat detection for Pixel devices, and launched a verification badge for trustworthy VPNs.

AppWizard

February 3, 2025

Google blocked 2.36 million risky Android apps from Play Store in 2024

Google blocked 2.3 million Android app submissions to the Play Store in 2024 due to policy violations that posed risks to users. The company also banned 158,000 developer accounts for attempting to introduce harmful applications, including malware and spyware. The number of blocked apps increased from 2,280,000 in 2023 and 1,500,000 in 2022, aided by AI assistance in 92% of human reviews. Google prevented 1.3 million apps from gaining excessive permissions and upgraded Google Play Protect, which scanned over 200 billion apps daily and identified over 13 million new malware apps from outside Google Play. The Google Play SDK index added 80 trusted SDKs, and the Play Integrity API adoption led to an 80% reduction in abuse from untrusted sources. Google's untrusted APK installation blocking system expanded to several countries and thwarted 36 million installation attempts of 200,000 unique apps from reaching 10 million Android devices.

AppWizard

February 3, 2025

Google blocked over 2.5 million suspicious Android apps from the Play Store last year

In 2024, Google blocked over 2.3 million potentially harmful Android applications and banned 158,000 developer accounts for policy violations. The increase in blocked applications was due to new AI-powered threat detection systems, which assisted in 92% of human reviews for harmful apps. Google prevented 1.3 million existing applications from obtaining excessive permissions that could compromise user data. Upgrades to Google’s Play Protect antivirus app enhanced its ability to scan over 200 billion apps daily for malware. Additionally, a security upgrade for Android phones improved user control over app access to photos and videos. Despite these advancements, some security flaws and trojans still emerged, highlighting the need for user vigilance when downloading apps.

AppWizard

February 3, 2025

Over 2 million risky Android apps were blocked from the Play Store last year

Google blocked 2.36 million malicious Android apps from its Play Store in 2024 and took action against 158,000 developer accounts attempting to introduce malware and spyware. The company acknowledges that some dangerous apps may still appear on third-party websites and encourages users to utilize Google’s Play Protect system. Google attributes its success in blocking malicious apps to advancements in artificial intelligence, which has improved threat detection.

AppWizard

October 7, 2024

Google officially kicks Kaspersky antivirus software app off the Play Store

Kaspersky's official Android app was removed from the Google Play Store, and its developer accounts were disabled, following sanctions imposed by the US government. Kaspersky is investigating the unavailability of its software and has provided alternative download options through other app stores and its official website. The US government has raised concerns about Kaspersky's software potentially being exploited by the Russian government, leading to a ban on the sale of its products effective July 20, 2024. Kaspersky was placed on the US Entity List, and updates to its software were halted as of September 29. The company is offering free security products and safety tips for six months to mitigate customer impact. In September 2024, US customers reported that their antivirus software was replaced with a new solution named UltraAV.