Antivirus app containing password-stealing malware was downloaded thousands of times from Google Play Store

It's beginning to feel like Google is squandering its time while advance notice individuals about the risks of sideloading applications, considering the number of malware-invaded programs slip onto the Play Store. Six more were found and eliminated after they were viewed as taking login certifications while taking on the appearance of antivirus applications.
Check Point security analysts said the six applications had been downloaded more than 15,000 times before Google eliminated them from its store following the network protection company's exposure. While clients thought they were downloading versatile antivirus applications, they were really introducing the Sharkbot Android stealer, amusingly.
Sharkbot works by persuading casualties to enter their certifications in windows that copy input structures, frequently when it identifies banking applications are opened. It can likewise take data by keylogging, capturing SMS messages, and acquiring full remote access.
When an individual enters their username and secret word, the subtleties are shipped off a malevolent server and used to get to records like banks, online entertainment, messages, and the sky is the limit from there.
The greater part of the casualties came from the UK and Italy. Strangely, the malware involved geofencing to distinguish and overlook clients in China, India, Romania, Russia, Ukraine, or Belarus.

The applications had the option to slip past the Play Store shields in light of the fact that their pernicious conduct wasn't initiated until after somebody downloaded one and it spoke with the server, composes ZDNet.
The Sharkbot-invaded applications were eliminated from the Google Play Store in March, however they will probably still be accessible on different customer facing facades.
It was just fourteen days prior when specialists at French portable security organization Pradeo uncovered that an application named Craftsart Cartoon Photo Tools contained a rendition of an Android trojan malware called Facestealer. It had the option to take versatile clients' Facebook login qualifications and had been downloaded more than 100,000 times before Google eliminated it.