Malware-ridden apps made it into Google's Play Store, scored 19 million downloads

Zscaler reported that 77 apps on Google Play — collectively downloaded over 19 million times — contained malware, including an updated Anatsa banking trojan with a keylogger, SMS interception, per-chunk DES key loading, APK/ZIP obfuscation, and dynamically dropped JSON payloads; the strain is believed to target 831 financial institutions (including crypto exchanges). The report highlights effective evasion that bypassed Google's scans, the prevalence of ad-fraud and credential-stealing families like Joker, and notes that Google says it detected and mitigated the issues.