Google has stepped in to remove several Android applications from the official Play Store following the disclosure that the apps in question were found to serve intrusive ads.
The findings were reported by the Czech cybersecurity firm Avast on Monday, which said the 21 malicious apps were downloaded nearly eight million times from Google’s app marketplace.
Currently, 19 of the apps are still available on the Play Store, but Google was investigating the report.
The apps masqueraded as harmless gaming apps and came packed with HiddenAds malware, a notorious Trojan known for its capabilities to serve intrusive ads outside of the app. The group behind the operation relies on social media channels to lure users into downloading the apps.
“The users need to be vigilant when downloading applications to their phones and are advised to check the applications’ profile, reviews and to be mindful of extensive device permission requests,” Jakub Vavra, a threat analyst at Avast, said in a statement.
The apps have been downloaded about eight million times so far based on SensorTower, a mobile apps marketing intelligence and insights company, estimates.
Numerous user reviews on the Google Play Store mentioned that the apps grabbed their attention through advertisements on YouTube, promising a different game than what the app ultimately offered.