WSAGAScript is a tool that lets you easily patch the Windows Subsystem for Android to install the Google Play Store.

Do not grant permissions to an app that it should not need: torches and star-gazing apps don’t need access to your contacts and phone. And never grant accessibility permissions that facilitate device control unless you have a need. Once a month, scan through your phone and delete a few of the apps you no longer need or haven’t used in a long time.

Presence of the malware was found on two Play Store apps, namely Benqu's Wuta Camera and the now-removed Max Browser. The former boasts over 10 million downloads, and contained the Necro Trojan from version 6.3.2.148 (July 18) through version 6.3.6.148 (August 20).

As Android Authority explains, “the Google Play Integrity API lets apps check whether your account is ‘unlicensed’, meaning you didn’t install or buy the app from Google Play. More importantly, the app can then show a remediation dialog that tells you they have to download the app from Google Play to continue using it.”

The malware was spotted circulating via apps called 'Wuta Camera' and 'Max Browser' on the Google Play Store, according to Kaspersky.