logo

Android malware found on Amazon Appstore disguised as health app

ID: 3a1de4ca-b457-5472-9192-440904cfca02

STIX ID: report--3a1de4ca-b457-5472-9192-440904cfca02

Feed Name: Bleeping Computer

Threat Score
65/100

Date Published: 2024-12-19

Date Updated: 2026-03-27

Author: Bill Toulas

...
...

A malicious Android spyware application called 'BMI CalculationVsn' was discovered on the Amazon Appstore posing as a simple BMI calculator; McAfee researchers found it recording the screen, enumerating installed apps, and intercepting SMS (including OTPs). The app was removed from the store after disclosure, but affected users must manually uninstall the app and perform full scans; the report highlights risks of sideloaded or third‑party store apps and advises scrutinizing permissions and keeping protections like Google Play Protect enabled.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.