Ten thousand users downloaded a malicious app from the Google Play store over the last three weeks before it was removed.
The Bad Pigs app was designed to look like a popular app called Bad Piggies.
It redirected users to unwanted ads, including one that links to a fake anti-virus scan that charges users $20 week for the service, F-Secure security adviser Sean Sullivan said.
The Finnish anti-virus also directed users to enter their phone number which could be used for future scams.
Bad Pigs could also gain numerous permissions on mobile devices, including creating desktop icons that link to ad sites, displaying ads in the Android notification bar, and creating bookmarks in the user's browser.
It could access users' browsing history, determine their location via GPS and access other account information, including email addresses.
The app author's page contained two other fake Android apps which were subsequently removed.
_(5).jpg&h=140&w=231&c=1&s=0)
.png&w=100&c=1&s=0)
Private AI vs Public AI: How your organisation can securely adopt AI without compromise and excessive cost
iTnews Benchmark Security Awards 2025
Digital Leadership Day Federal
Government Cyber Security Showcase Federal
Government Innovation Showcase Federal
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
