Android malware 'Necro' infects 11 million devices via Google Play

Kaspersky and BleepingComputer report a widespread campaign where the Necro Android Trojan loader was distributed through malicious ad SDKs in legitimate Google Play apps (notably Wuta Camera and Max Browser) and via unofficial modified apps, achieving at least 11 million installs; Necro delivers multiple payloads and plugins for ad fraud, subscription fraud, arbitrary code execution (JavaScript/DEX), and proxying, using obfuscation and steganography for payload delivery — affected apps were removed from Play and users are advised to uninstall compromised apps.