Security News > 2023 > April > Google Play threats on the dark web are big business

The security researchers found that Google Play threats and Android phone infections are big business.
A Google Play developer account can be bought for around $60-$200 USD depending on account characteristics such as the number of developed apps or the number of downloads.
On Google Play, before an Android app is available to users, it undergoes a review process to verify that it meets certain standards and adheres to the developer policies, to ensure that it is not harmful or malicious.
One of the most common methods is to have a benign app approved on Google Play and then updated with malicious content or malware, which might compromise all users of that application and possibly their employers' networks.
Google Play Loaders are pieces of code whose purpose is to inject malicious code into a Google Play application.
Because they approach their victims through email or instant messaging apps, they need their malware to be more discreet and often do not use Google Play for those attacks.
News URL
https://www.techrepublic.com/article/google-play-threats-dark-web/
Related news
- Week in review: Exploited 7-Zip 0-day flaw, crypto-stealing malware found on App Store, Google Play (source)
- SpyLend Android malware downloaded 100,000 times from Google Play (source)
- Google Cloud KMS Adds Quantum-Safe Digital Signatures to Defend Against Future Threats (source)
- New North Korean Android spyware slips onto Google Play (source)
- Malicious Android 'Vapor' apps on Google Play installed 60 million times (source)
- How does your data end up on the dark web? (source)