Security News > 2023 > April > How much to infect Android phones via Google Play store? How about $20k

If you want to sneak malware onto people's Android devices via the official Google Play store, it may cost you about $20,000 to do so, Kaspersky suggests.
Before cybercriminals can share their malicious apps from Google's official store, they'll need a Play developer account, and Kaspersky says those sell for between $60 and $200 each.
Uploading straight-up spyware to the Play store for people to download and install may attract Google's attention, and cause the app and developer account to be thrown out.
The app may refuse to work as normal until the loader is allowed to do its thing, convincing marks into opening up their devices to crooks.
Google: If your Android app can create accounts, it better be easy to delete them, too Mozilla says 80 percent of Google Play's app safety labels are inaccurate Malware disguised as Tor browser steals $400k in cryptocash Check out this Android spyware, says Microsoft, the home of a gazillion Windows flaws.
To be clear, Google Play doesn't intentionally allow the sale of malicious apps on its store.
News URL
https://go.theregister.com/feed/www.theregister.com/2023/04/10/kaspersky_google_play_malicious_apps/
Related news
- Google blocked 2.36 million risky Android apps from Play Store in 2024 (source)
- Crypto-stealing iOS, Android malware found on App Store, Google Play (source)
- SpyLend Android malware downloaded 100,000 times from Google Play (source)
- Google Bans 158,000 Malicious Android App Developer Accounts in 2024 (source)
- Google fixes Android kernel zero-day exploited in attacks (source)
- Google Patches 47 Android Security Flaws, Including Actively Exploited CVE-2024-53104 (source)
- Google patches odd Android kernel security bug amid signs of targeted exploitation (source)
- Google Play, Apple App Store apps caught stealing crypto wallets (source)
- Week in review: Exploited 7-Zip 0-day flaw, crypto-stealing malware found on App Store, Google Play (source)
- Google Confirms Android SafetyCore Enables AI-Powered On-Device Content Classification (source)