Android users are facing a serious threat as numerous apps have been found to contain dangerous banking malware. These apps, downloaded millions of times, were all accessible on the Google Play Store, making it easier for them to infect smartphones.

Zscaler’s ThreatLabs team initially identified the presence of the Anatsa bug in many of these malicious apps. Anatsa, a malware detected in 2020, is capable of stealing credentials, logging keystrokes, and facilitating fraudulent transactions.

What makes this situation alarming is the method by which the malware infiltrates devices. Anatsa utilizes a dropper technique, where threat actors disguise a benign-looking application on the official Google Play Store. Once installed, Anatsa stealthily downloads a malicious payload from its command-and-control server, evading detection mechanisms and successfully infecting devices.

Apart from Anatsa, other malware attacks have been reported. ThreatLabz disclosed identifying and reporting 77 malicious applications to Google, including the notorious Joker bug. The Joker bug can intercept and send text messages, capture screenshots discreetly, place phone calls, steal contact lists, and even enroll victims in premium services without their knowledge.

Zscaler emphasized the importance of Android users verifying app permissions to ensure alignment with the app’s intended functionality. It is advisable to check reviews and research developers before installing any software on your device. Enabling Google Play Protect, which examines apps and devices for malicious behavior, is a recommended precaution. This service also conducts safety checks on apps before downloading, alerting users to potentially harmful applications and potentially removing them from devices.