Presence of the malware was found on two Play Store apps, namely Benqu's Wuta Camera and the now-removed Max Browser. The former boasts over 10 million downloads, and contained the Necro Trojan from version 6.3.2.148 (July 18) through version 6.3.6.148 (August 20).

The malware was spotted circulating via apps called 'Wuta Camera' and 'Max Browser' on the Google Play Store, according to Kaspersky.

A new version of Necro malware, a form of malware that first emerged in 2019, has been found to have been installed on at least 11 million devices through apps that were distributed through the Google Play store.

A new version of the Necro malware loader for Android was installed on 11 million devices through Google Play in malicious SDK supply chain attacks.

Android apps, some of which have millions of installations, have malicious code in them. Google has now removed one app; users should do the same.

Do not grant permissions to an app that it should not need: torches and star-gazing apps don’t need access to your contacts and phone. And never grant accessibility permissions that facilitate device control unless you have a need. Once a month, scan through your phone and delete a few of the apps you no longer need or haven’t used in a long time.