Malicious apps uploaded to Play Store

Malicious versions of Google Chrome and WhatsApp were recently uploaded to the Google Play Store and collectively accumulated several hundred thousand downloads, according to Android Authority. The fake WhatsApp app, developed by Agment Assets sallu, reached 500,000 downloads before being removed, while the fraudulent Chrome version accumulated 100,000 downloads before being taken down.

Play Store's Early access program exploited

The fake WhatsApp application exploited a flaw in the Play Store's "Early access" program, which is typically used for publishing applications in development. Experts from BitDefender noted in early September that this distribution channel prevents users from leaving comments or ratings on the application's page, making it ideal for hiding malicious intentions.

Malicious Chrome app used deceptive tactics

For Chrome, the manipulation involved initially naming the application "Ball Bounce" before changing it to "Google Chrome." To appear in search results above legitimate applications, the malicious app used Google's sponsored results program. This involved copying and pasting screenshots and presentation text from the real application, making it difficult for users to distinguish between the legitimate and fake versions unless they checked the developer's name.

Users advised to check official app pages

Most Android phones come with the Chrome browser pre-installed, reducing the need to download it from the app store. Users concerned about having downloaded the fake versions are advised to check the official WhatsApp and Chrome pages on the Play Store. If their phone indicates the application is installed, there is no need for panic. If not, they should uninstall the fake applications and reinstall the legitimate versions.

Security measures for affected users

In the event of hacking or data leaks, users should change passwords for affected accounts immediately, use unique and strong passwords, enable two-factor authentication where possible, and be wary of suspicious communications. They should also update their devices and software to address potential security vulnerabilities. If fraudulent transfers occur, they should report them on the Perceval platform.