This Android malware can intercept your OTPs, record your screen, and carry out a range of other harmful actions. How safe is your phone?

In today’s digital landscape, smartphones are much more than just devices; they store personal information, banking details, and more. While Android phones offer significant flexibility, that openness comes with risks, especially when it comes to downloading apps. This week, security experts issued new warnings about Android malware capable of stealing your One-Time Passwords (OTPs), recording your screen, and even taking control of your device. So, how secure is your phone?

Two recent reports from Kaspersky and Cleafy have identified dangerous malware targeting Android users. Kaspersky (via Forbes) notes that modified versions of popular apps like Spotify and WhatsApp can serve as entry points for the Necro Trojan, which has been around since 2019 and has since evolved.

Kaspersky warns that this trojan can now be found in both legitimate apps, such as Wuta Camera on Google Play (which has over 10 million downloads), as well as in modified versions from third-party sites. The Necro Trojan is designed to install unwanted applications, display ads, and even make unauthorized purchases of paid subscriptions.

Kaspersky’s advice is straightforward: steer clear of downloading apps from unofficial sources, and exercise caution even with those available on Google Play.

The second threat comes from Cleafy, which has identified an unclassified Android banking Trojan, a variant of TrickMo. This malware is distributed through fake Chrome browser updates and masquerades as Google Play Services, tricking users into granting it permissions. Once installed, TrickMo can steal OTPs, record screens, log keystrokes, and more, all while evading detection.

These two reports underscore a common problem: even well-known apps and trusted brands can be used to conceal malware. To enhance your safety, Google advises using only official app stores, ensuring Play Protect is activated, and being cautious about app permissions.

To protect yourself, consider the following safety tips:

• Only download apps from official stores.

• Be wary of apps requesting unnecessary permissions.

• Regularly remove unused apps from your device.

• Avoid installing apps from third-party sources, especially modified versions.