Smart-sex-toy users targeted by clicker trojan

Doctor Web analysts discovered Android.Click.414.origin, a modular Android clicker trojan embedded in popular apps (Love Spouse and QRunning, collectively installed on over 1.5 million devices). The trojan fingerprints devices, uses WebView to load pages, execute JavaScript, click ads, fill forms, capture screenshots, and includes anti-emulation and language checks; it was found in Google Play (February 2024), Love Spouse was later updated to remove it while QRunning remained infected, and IOCs are published.