Android phone users urged to delete two apps due to malware which could affect thousands

Android phone users have been urged to delete apps that have been affected by invasive malware with thousands of people believed to be at risk.

SharkBot is a banking trojan which was first discovered in 2018 and the malicious app was found targeting cryptocurrency apps where it would steal the victims' login information. This allowed hackers to use the victims' accounts.

The malicious malware resurfaced on Google Play earlier this week and users have been warned to look out for two apps which have been corrupted. These apps only become infected with the virus once they have been downloaded on to a phone.

The two apps are called Mister Phone Cleaner and Kylhavy Mobile Security (SOPA Images/LightRocket via Getty Images)

The two apps are called Mister Phone Cleaner and Kylhavy Mobile Security and have both been found to be infected with the malware, according to software experts at Fox-IT who made the discovery which was reported by The Express.

Anyone who has both apps installed on to their devices have been urged to delete them immediately. Google has already banned both Mister Phone Cleaner and Kylhavy Mobile Security from Google Store but phones with the apps already downloaded could become the next cyber victim if they choose to ignore the advice.

Google has already banned both apps from the Google Store (SOPA Images/LightRocket via Getty Images)

By using Sharkbot, scammers can bypass Google's stringent security credentials and steal money from Android users' online bank accounts, and create fake login pages for the hackers to steal user names and passwords.

Speaking to The Express about the malware, Fox-IT's Alberto Segura said: "This new version asks the victim to install the malware as a fake update for the antivirus to stay protected against threats. We have found two SharkbotDopper apps active in Google Play Store, with 10K and 50K installs each of them.

Scammers can bypass Google's stringent security credentials and steal money from Android users' online bank accounts (Getty Images/iStockphoto)

"On the 22nd of August 2022, Fox-IT’s Threat Intelligence team found a new Sharkbot sample with version 2.25; communicating with command-and-control servers mentioned previously. This Sharkbot version introduced a new feature to steal session cookies from the victims that logs into their bank account."

How to delete apps on Android

• Open the Google Play Store app.
• At the top right, tap the profile icon.
• Tap Manage apps and devices. Manage.
• Tap the name of the app that you want to delete.
• Tap Uninstall.