free subscriptions

A new variant of Necro Android malware has compromised around 11 million devices by spreading through legitimate applications on Google Play, such as Spotify, WhatsApp, and Minecraft. The malware downloads adware that enrolls users in subscriptions without consent and uses infected devices to channel malicious traffic. It conceals its activities by downloading payloads disguised as PNG image files, complicating detection. Additionally, the malware is distributed through unofficial modifications of popular apps, which promise enhanced features but carry hidden risks, including WhatsApp mods for privacy and Spotify mods for ad-free access. The extent of the infection is uncertain due to the lack of download statistics from unofficial app stores.