On the Google Play Store, the cybersecurity analysts at Dr.Web have recently witnessed a major tip in trojan infiltration. Not only that even they have also detected one application that has more than 500,000 installs and steals users’ data from the notifications.
The threat actors use these malicious applications that belong to a family of trojan malware to perform several malicious tasks like:-
Here below we have mentioned all the trojans tracked by the cybersecurity experts at Dr.Web:-
Among the detected Trojan malware, Android.Spy.4498 trojan is the one that is traced with high activity on the Google Play Store. The Android.Spy.4498 trojan is the unofficial modifications (mods) of WhatsApp messenger such as:-
The threat actors are spreading these fake malicious WhatsApp mods through several mediums like:-
Moreover, it has been also detected that all these above-mentioned malicious mods offer multiple utility features, and here they are:-
Along with this trojan, multiple numbers of trojan malware were detected on the Play Store by the experts of Dr.Web security firm. On the Google Play Store, the attackers are spreading threats under the hood of multiple genuine-looking applications.
Types of applications scattered by the threat actors on Google Play Store:-
For diverting the stolen money from the victim’s account to the scammer’s bank account, the attacker tricks the user to deposit money for trading in the fake investment apps.
While in the case of other applications, the attackers trick the users into signing up for the costly subscriptions to steal their money.
Here the threat actors abuse the Flurry stat service to seize the notifications from the Google Play Store and the Samsung Galaxy Store apps.
For mitigations, the cybersecurity researchers have recommended:-
You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates.
In a disturbing trend, cybercriminals, predominantly from Chinese underground networks, are exploiting Near Field Communication…
In a concerning trend for cybersecurity, multiple threat actors, including ransomware groups and state-sponsored entities,…
Unit 42’s 2025 Global Incident Response Report, ransomware actors are intensifying their cyberattacks, with 86%…
Group-IB’s High-Tech Crime Trends Report 2025 reveals a sharp 22% surge in phishing websites, with…
Cybersecurity firm Volexity has tracked a series of highly targeted attacks by suspected Russian threat…
Threat actors are increasingly leveraging Google Forms, the tech giant’s widely-used form and quiz-building tool,…
![](data:image/svg+xml;charset=utf-8,<svg height="400px" width="1000px" xmlns="http://www.w3.org/2000/svg" version="1.1"/>)
.jpeg?w=1024&resize=1024,682&ssl=1)
