Google Removes Ransomware-Laden App From Play Store
A ransomware sample that was recently discovered embedded in an Android application on Google Play Store suggests that threat actors may have found a dangerous new way to get extortion malware on mobile devices.
The malware, dubbed Charger, is believed to be the first instance of ransomware being successfully uploaded to Google’s official mobile application store. So far there have been no reported incidents of similar uploads on Apple’s App Store.
Security vendor Check Point software found Charger embedded in an Android batter- saving app called EnergyRescue when inspecting a quarantined device belonging to an employee of one of its enterprise clients.