According to a recent report by Securelist, a new version of Necro loader discovered last month by Kaspersky was spotted in a modded version of apps as well as some apps on the Google Play Store. This new version of the Necro mobile trojan is spreading via apps on Google Play Store as well as modded version of apps and games like Spotify, WhatsApp, Minecraft, Stumble Guys, Car Parking Multiplayer and Melon Sandbox.
Once installed, Necro installs several payloads and activates a number of harmful plugins. These plugins run adware on your device with invisible windows, run various scripts, execute programs that fraudulently activate subscriptions and route traffic. As for Wuta Camera and Max Browser, Nectro generated money for the attacker by opening and clicking on advertisements in the background.
To keep your self safe from Necro mobile trojan, make sure to not download any suspicious APKs outside of the Play Store. Even if you are downloading apps from official sources like Aptoide and the Google Play Store, make sure to check the reviews once to see if the app is indeed offering the features it claims.
At the same time, Google shares that the number of infected users is at least 11 million, the trojan might have impacted millions more as there is no way to track app downloads from unofficial sources and third party app stores.
