Over half a million have installed Android malware posing as driving games from Google’s very own app store. A security researcher at ESET, Lukas Stefanko named 13 gaming apps in a tweet with details made by the same developer which were available for download from Google Play. Two out of thirteen of the apps mentioned were trending on the store contributing to greater visibility for users seeking for new or additional apps.

The apps went over 580 000 installs before Google took action. Users who downloaded the app would expect a high octane, adrenaline-filled car or truck driving game but instead received a buggy app which crashed every time you open it.
The app in fact was downloading a payload from a different domain which belonged to an app developer registered in Istanbul with installed malware discreetly deleting the app’s icon simultaneously.

There is no accurate indication of what the questionable apps actually do as none of the malware scanners used picked up on what the malware does. However, one thing clear here is that the malware launches every time the Android phone or tablet starts up and gains full access to network traffic, which the malware author can use to steal private information.
Scott Westover, Google spokesperson confirmed that “the apps have been removed from the Play Store due to violation of policies.” This can be said as another embarrassing security blunder by Google as they have faced criticism due to their approach to the app and mobile security in comparison to Apple which some would argue to be too selective and restrictive on their selection on which apps get to be in the store.




