'Xavier' Malware infects Over 800 Android Apps on Google Play Store

Every time researchers urging Android Users not to download apps from third party sites, since a lot of them contains Malware. But now things have changed, as hackers and cyber criminals are bypassing Google’s security implementation on Play Store and uploading apps infected with malware.


More than 800 different Android apps that have been downloaded millions of times from the Google Play Store have been infected with malicious advertising libraries, which collects sensitive user data silently and can perform dangerous operations.

This Malware is initially emerged in September 2016 and is a member of AdDown malware family.

Most of the downloads came from countries like Indonesia, Philippines, and Vietnam, while some download attempts were from European countries and United States. 

Google has removed some of the infected apps from it's play store, and if you have installed any of these apps, then remove it immediately. Here is the list of 75 infected apps that google has removed. 


" Xavier’s stealing and leaking capabilities are difficult to detect because of a self-protect mechanism that allows it to escape both static and dynamic analysis. In addition, Xavier also has the capability to download and execute other malicious codes, which might be an even more dangerous aspect of the malware. Xavier’s behavior depends on the downloaded codes and the URL of codes, which are configured by the remote server. "

-according to Trend Micro’s blog post.

What should Android users do to protect themselves

Android users are advised to use a verified security software and always scan their devices. Another noteworthy thing about Android is that it is one of the most targeted smartphones operating systems in the world.

Just a couple of days ago researchers found WannaCry’s copycat WannaLocker (Hackread) ransomware targeting Android devices in China while Judy malware infected apps which were downloaded 36 million times.

Always look at the reviews given by the users who have downloaded the app, and also
verify app permissions before installing any app and grant those permissions that have are relevant for the app's purpose.


So what do you think about this? Comment your thoughts below.