136 dangerous apps get banned on Google Play after a study by Zimperium zLabs

Following the lodging of a complaint, Google took action and has banned 136 applications. Users must, however, act quickly since the Grifthorse Android Trojan is one-of-a-kind. Handy Translator Pro, Heart Rate and Pulse Tracker, Geospot: GPS Location Tracker, iCare – Find Location, and My Chat Translator is among the Google-banned applications.

Security experts at Zimperium zLabs have found Grifthorse Android Trojan, an aggressive mobile premium services campaign that has targeted over 10 million Google Android users across the world. According to researchers, although most internet frauds utilise phishing methods, the Grifthorse Android Trojan is unusual in that it is disguised behind malicious Android apps that function as Trojans, allowing it to take advantage of user interactions to propagate and infect more people.

When users look at the store description and requested permissions, these malicious Android apps appear to be harmless, but "this false sense of confidence changes when users get charged month after month for the premium service they get subscribed to without their knowledge and consent," the security research firm wrote in a blog post.

The threat group has been operating this operation since November 2020, according to a detailed examination of the Grifthorse Android Trojan. While these malicious apps were originally distributed through both the Google Play Store and third-party app stores, they have now been deleted from the Play Store when Zimperium zLabs informed Google of its discoveries.

However, just because these apps have been removed from the Google Play Store does not imply that GriftHorse malware-powered dangerous apps are no longer available to consumers. They're still available on third-party app shops that aren't safe. Even worse, they might be concealed inside some seemingly harmless programmes users have downloaded. That means users will need to track them down and remove them off your phone.

According to Zimperium zLabs, the virus poses a threat to all Android devices by acting as a Trojan that enrols unsuspecting users in paid services for a monthly fee of around 36 Euros.

The campaign targeted millions of users in over 70 countries by serving targeted malicious pages based on their IP address's geo-location and local language. After being infected, the victim is bombarded with screen alerts informing them that they have won a prize and must claim it right away. These pop-ups appear at least five times per hour until the application user accepts the offer.

When the victim accepts the prize invitation, the malware directs them to a geo-specific webpage where they are asked to verify their phone numbers. In actuality, they are giving their phone number to a premium SMS service, which will start charging them over 30 Euros per month on their phone bill. The victim is unaware of the theft's impact right away, and the chances of it continuing for months before being discovered are high, leaving the victim with little to no remedy for getting their money back.

The security firm provided a list of 136 apps, which were then removed from the Google play store.

The list of the apps,