Malicious Android ‘Vapor’ apps on Google Play installed 60 million times

Summary: Over 300 malicious Android applications masquerading as utilities were identified in a campaign dubbed “Vapor,” leading to the theft of sensitive user information and generating extensive ad fraud. These apps, downloaded over 60 million times, were able to evade Google’s security measures by delivering malware post-installation. Despite their removal from Google Play, there is a risk of similar threats resurging in new forms.

Affected: Google Play Store, Android Users

Keypoints :

• 331 apps categorized as part of the Vapor campaign, generating fraudulent ad requests and attempting credential theft.
• Malicious functionality is triggered post-installation, causing apps to hide or imitate legitimate applications to evade detection.
• Experts recommend users avoid unnecessary apps, monitor app permissions, and regularly scan for malware using Google Play Protect.