Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Closing the gap in Zero Trust implementation: What you need to conside...
Solving data protection challenges in an era of cloud and AI
42Gears Launches SureIdP — Zero Trust Identity and Access Manage...
42Gears Launches SureIdP — Zero Trust Identity and Access Manage...
Will robocall fraud start to decline in 2026 with stronger regulations...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Solving data protection challenges in an era of cloud and AI

      Solving data protection challenges in an era of cloud and AI

      Wednesday, June 18, 2025, 11:12 AM Asia/Singapore | Data Protection, Features
    • Featured

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Thursday, May 29, 2025, 5:04 PM Asia/Singapore | Features
    • Featured

      How the UAE proactively protects its digital economy

      How the UAE proactively protects its digital economy

      Monday, May 19, 2025, 2:16 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

LOGIN REGISTER
  • Features
    • Featured

      Solving data protection challenges in an era of cloud and AI

      Solving data protection challenges in an era of cloud and AI

      Wednesday, June 18, 2025, 11:12 AM Asia/Singapore | Data Protection, Features
    • Featured

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Thursday, May 29, 2025, 5:04 PM Asia/Singapore | Features
    • Featured

      How the UAE proactively protects its digital economy

      How the UAE proactively protects its digital economy

      Monday, May 19, 2025, 2:16 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning
News

What? Yet another malware debacle in the Android official app store?

By CybersecAsia editors | Monday, March 24, 2025, 5:57 PM Asia/Singapore

What? Yet another malware debacle in the Android official app store?

In yet another debacle from a supposedly safe official app store, over 300 malicious apps have slipped through

A large-scale cyber threat involving over 300 harmful Android applications that have collectively amassed 60 million downloads on Google Play has been disclosed by threat researchers.

The deceptive apps, classified under the name “Vapor”, were designed to either bombard users with intrusive ads or steal sensitive information, including login credentials and credit card details.

The campaign was first identified by IAS Threat Lab, which had initially reported 180 malicious apps generating millions of fraudulent ad interactions daily. A follow-up study by Bitdefender had later expanded the count to 331 apps, with infections particularly widespread in Brazil, the US, Mexico, Turkey, and South Korea.

Although these apps have since been removed from the hackers’ playground, Google Play, security experts warn that the perpetrators may return with new applications, having already demonstrated their ability to bypass Google’s screening process.

How Vapor apps operated

These apps posed as everyday utilities, such as fitness trackers, note-taking apps, battery optimizers, and QR scanners. Upon initial submission, they appeared legitimate, successfully passing Google’s security reviews. However, once installed, the apps downloaded hidden malware from external servers, enabling harmful functionality post-installation.

Some of the most popular fraudulent apps included:

  • AquaTracker, ClickSave Downloader, Scan Hawk, Water Time Tracker – each with over 1m downloads
  • BeatWatch – 500,000 downloads
  • TranslateScan, Handset Locator – smaller but still concerning download numbers

To evade detection, developers spread these apps across multiple accounts, ensuring that the removal of one would not disrupt the entire operation.

Hidden threats and user impact

Once installed, these apps concealed their icons, making them difficult to locate and uninstall. Some even disguised themselves as Android’s system modules. These apps ran in the background, launching deceptive ads that covered the entire screen while disabling navigation buttons, leaving users unable to exit.

In addition to ad fraud, several of these apps deployed fake login screens for popular apps, tricking users into providing their credentials. Others attempted to steal credit card details under false pretenses.

Google has since removed all Vapor apps and assured users that Play Protect remains active by default to detect and prevent similar threats in the future.

Share:

PreviousExpect to see more computers with firmware protected by post-quantum cryptography soon
NextSurvey finds financial professionals expecting more cyber risks in 2025

Related Posts

Generative AI chatbot rivalry spurs intense scrutiny among industry stakeholders

Generative AI chatbot rivalry spurs intense scrutiny among industry stakeholders

Friday, February 21, 2025

Security culture report: Education and Construction industries is lacking

Security culture report: Education and Construction industries is lacking

Monday, April 19, 2021

13 cloud and AI development predictions for a rockin’ 2024!

13 cloud and AI development predictions for a rockin’ 2024!

Monday, January 8, 2024

International ‘scamming-as-a-service’ affiliate scheme expands to South-east Asia

International ‘scamming-as-a-service’ affiliate scheme expands to South-east Asia

Friday, August 12, 2022

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • St Luke’s ElderCare enhances operations and capabilities through a centralized secure, scalable network

    St Luke’s ElderCare enhances operations and capabilities through a centralized secure, scalable network

    With only a small IT team, the digital transformation has united operations across 30 locations, …Read more
  • Automating border control and security with facial recognition technology

    Automating border control and security with facial recognition technology

    Indonesia Immigration & Seaport Authorities enhances security and speeds up border control queues at Batam …Read more
  • Securing wealth advisory services without unnecessary friction: Endowus

    Securing wealth advisory services without unnecessary friction: Endowus

    The wealth advisory platform demonstrates its non-negotiable commitment to a robust security posture through partnering …Read more
  • LifeTech group sets up next-gen security operations center in Malaysia

    LifeTech group sets up next-gen security operations center in Malaysia

    By partnering with a unified cybersecurity platform, the firm will be offering cost-effective advanced SOC …Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.