Fake Fortnite Apps Scamming & Spying on Android Gamers

Zscaler ThreatLabZ observed multiple fake Fortnite Android apps delivering distinct malicious behaviors: a spyware RAT (capable of harvesting calls/SMS/contacts, keylogging, camera/audio capture, wiping, and abusing Accessibility), a CoinHive-based cryptominer embedded in the APK assets that significantly increases CPU/battery usage, and scam apps (V‑Bucks generators and revenue-driving survey installers) distributed via malicious domains and a Play Store listing—one fake app had thousands of installs before removal. The report provides example URLs/domains, behavioral details, screenshots, and user remediation steps (remove app, revoke Accessibility, disable unknown sources).