Do not grant permissions to an app that it should not need: torches and star-gazing apps don’t need access to your contacts and phone. And never grant accessibility permissions that facilitate device control unless you have a need. Once a month, scan through your phone and delete a few of the apps you no longer need or haven’t used in a long time.

The malware was spotted circulating via apps called 'Wuta Camera' and 'Max Browser' on the Google Play Store, according to Kaspersky.

Enlarge / It's never explained what this collection of app icons quite represents. A disorganized app you tossed together by sideloading? A face that's frowning because it's rolling down a bar held up by app icons? It's weird, but not quite evocative.

A new version of Necro malware, a form of malware that first emerged in 2019, has been found to have been installed on at least 11 million devices through apps that were distributed through the Google Play store.

This is critical because Google isn’t deleting apps from phones, and so if you have such low-quality, higher-risk apps on your device then the onus is on you to make an honest assessment and to delete— not just leave in place —those apps that fail the test.

If there's something worse than a trojan, it's a trojan that's pretty much everywhere. In the case of Android phones, one specific piece of malware has made its way onto at least 11 million Android devices.

The Necro trojan has resurfaced and is now being injected into legitimate apps by hackers through malicious SDKs.