APKs was removed twice – in January 2021 and again the next month – when the developer uploaded clean versions of Bluetooth Auto Connect before adding the malware back in a future update. Interestingly, the malware in Mobile apps Group's. 'As a result, unlocking your phone after several hours means closing multiple tabs,' Malwarebytes' Nathan Collier said. Once it takes action, the app begins opening phishing sites in Chrome that range from harmless pay-per-click spam, to sites telling users to download updates, or take action because their device has been infected. It analyzed one of Mobile apps Group's products, Bluetooth Auto Connect, which ostensibly does what its name suggests but also much more.Ī run of over ten months with malicious code on Google Play? Perhaps it's time to say three strikes and you're out to Mobile apps GroupĪccording to Malwarebytes, once installed the app waits for a few days to start behaving maliciously. The apps come from developer Mobile apps Group, and are infected with the Trojan known as HiddenAds, said security shop Malwarebytes.

In brief A quartet of malware-laden Android apps from a single developer have been caught with malicious code more than once, yet the infected apps remain on Google Play and have collectively been downloaded more than one million times.

Malwarebytes google play