New HiddenAds malware affects 1M+ users and hides on the Google Play Store

McAfee Mobile Research identified Android/HiddenAds, a family of auto-starting adware apps on Google Play that execute on installation by abusing ContactsContract Directory metadata, create persistent services that continuously display ads, and hide by changing icons/names; McAfee lists affected app package names, SHA256 hashes, a malicious domain, estimated installs (100K–1M+ per app), and geographic impact (e.g., South Korea, Japan, Brazil), and reports that removed apps were disclosed to Google.