A new malware called Godless has hit the Google Play Store, which targets devices on Android 5.1 Lollipop and earlier, which is more than about 90 percent of Android devices out there. Though, the Godless malware has hit mainlyIndia and other parts of southeast Asia, so Android users, beware.
This Malware looks a lot like a legitimate app and what it does is secretly “root” your phone and secretly install unwanted programs without the user having a clue on what exactly is happening. Godless hides inside an app and uses exploits to try to root the OS on your phone. This basically creates admin access to a device, allowing unauthorized apps to be installed and it can even install spyware.
The security firm, Trend Micro said it found various apps in Google Play Store that has this malicious code. It’s that bad that it can bypass security checks on the Play Store and once the malware has been installed and has finished its rooting, it can be quite tricky to uninstall.
“The malicious apps we’ve seen that have this new remote routine range from utility apps like flashlights and Wi-Fi apps, to copies of popular game,” the company said.
Various apps on the Play Store are clean but have malicious versions that share the same developer certificate. A user can install the clean app but are then upgraded to the malicious version without them even knowing.