Watch out! These Android apps contain viruses

A recent joint investigation by several governments has exposed a concerning wave of Android apps infected with powerful spyware. The findings, led by agencies from countries including the UK, Germany, and Canada, reveal how these malicious apps are compromising user privacy on a global scale. The situation is so serious that governments themselves have stepped in to issue warnings—a rare but telling move.

Governments uncover trojans targeting Android users

The malicious apps are spreading two specific trojans: Moonshine and BadBazaar, both capable of granting remote control of the infected device. Once installed, these apps allow cybercriminals to access the camera, microphone, files, and even real-time location, putting user safety at serious risk. Although these attacks appear to be aimed at individuals with political links to China, any user could be affected by these threats.

These apps are not from Google Play, but they look like it

The infected applications are typically disguised as legitimate tools like PDF readers, chat apps or calculators, often mimicking names and icons of trusted apps such as Adobe Acrobat, GBWhatsApp or Signal. While they don’t originate from Google Play, their professional appearance tricks users into downloading them from third-party websites, where security is far more lax.

What users should do now

If you’ve recently installed apps outside of the official Google Play store, it’s time to act. Delete any suspicious apps immediately, especially those matching names like Free WiFi Pass, AppLock, or FlyGram. Experts urge users to avoid sideloading apps altogether, as this practice remains one of the most common infection vectors in the Android ecosystem.