Boy, I’m so glad Google doesn’t want us sideloading apps, I fee so much safer using play. (Yes, that’s sarcasm)
I mean, it was side loaded too. “Spotiplus” was infected with it apparently, but I do agree that Google allows so much malware on the store its crazy!
The infected apps are at the end.
The researchers found Necro in two Google Play apps. One was Wuta Camera, an app with 10 million downloads to date. Wuta Camera versions 6.3.2.148 through 6.3.6.148 contained the malicious SDK that infects apps. The app has since been updated to remove the malicious component. A separate app with roughly 1 million downloads—known as Max Browser—was also infected. That app is no longer available in Google Play.
The researchers also found Necro infecting a variety of Android apps available in alternative marketplaces. Those apps typically billed themselves as modified versions of legitimate apps such as Spotify, Minecraft, WhatsApp, Stumble Guys, Car Parking Multiplayer, and Melon Sandbox.
People who are concerned they may be infected by Necro should check their devices for the presence of indicators of compromise listed at the end of this writeup.
https://securelist.com/necro-trojan-is-back-on-google-play/113881/ for the list mentioned at the end of your comment.
