Security News > 2023 > September > 'Evil Telegram' Android apps on Google Play infected 60K with spyware

At the time the researchers published their report, several malicious apps were still available for download through Google Play.
The Telegram apps presented in Kaspersky's report are promoted as "Faster" alternatives to the regular app.
Google has since taken these Android apps off Google Play and shared the following statement with BleepingComputer.
Late last month, ESET warned about two trojanized messaging apps, Signal Plus Messenger and FlyGram, promoted as more feature-rich versions of the popular open-source Signal and Telegram apps.
Now removed from Google Play and the Samsung Galaxy Store, those apps contained the BadBazaar malware that allowed their operators, the Chinese APT 'GREF,' to spy on their targets.
Trojanized Signal and Telegram apps on Google Play delivered spyware.
News URL
Related news
- Crypto-stealing iOS, Android malware found on App Store, Google Play (source)
- SpyLend Android malware downloaded 100,000 times from Google Play (source)
- New FireScam Android data-theft malware poses as Telegram Premium app (source)
- FireScam Android Malware Poses as Telegram Premium to Steal Data and Control Devices (source)
- FireScam infostealer poses as Telegram Premium app to surveil Android devices (source)
- Google blocked 2.36 million risky Android apps from Play Store in 2024 (source)
- Google Bans 158,000 Malicious Android App Developer Accounts in 2024 (source)
- Google fixes Android kernel zero-day exploited in attacks (source)
- Google Patches 47 Android Security Flaws, Including Actively Exploited CVE-2024-53104 (source)
- Google patches odd Android kernel security bug amid signs of targeted exploitation (source)