Update 2025! Warning: “Dangerous apps” must not be installed on your device. Risk of having your data and money drained from your account on both iOS and Android.
Table of Contents
- Update 2025! Warning: “Dangerous apps” must not be installed on your device. Risk of having your data and money drained from your account on both iOS and Android.
In 2025, cyber threats on mobile devices will increase significantly. This is especially true of malicious applications that are disguised as common apps, such as fake banking apps, advertising apps, or data spying apps. According to a Kaspersky report, attacks on Android smartphones increased 29% in the first half of 2025 compared to the same period last year. Additionally, Zimperium reports that attackers are increasingly adopting mobile-first tactics, allowing malicious apps to spread through stores like Google Play and the App Store. If these apps are found on a device, Should be quickly deleted to prevent risk.
New Scam 2025: Money-sucking apps are more subtle than before.
According to Malwarebytes and Kaspersky, fraudsters use malware to embed malware into seemingly safe apps, such as adware or banking trojans, which can steal passwords, capture OTPs, or remotely control devices to transfer money from accounts. This year, new malware has emerged such as Frogblight (a rapidly evolving banking trojan) and Albiriox (MaaS that attacks over 400 financial apps). But there is also a risk from sideloaded apps or apps that have privacy vulnerabilities.
Check the list quickly! Group of dangerous apps that must be removed (Update 2025)
According to a report by Zscaler and Malwarebytes, 239 malicious apps were downloaded over 42 million times on Google Play this year. They often fall into the following categories. (This information comes from a threat analysis This is not a list of only normal apps like normal shopping apps):
1. Utility Apps and Convenience Tools
This group asks for permission to access more than necessary information, such as access to SMS or cameras in order to intercept data.
- Advertising apps (Adware): such as Triada and MobiDash, which increased in the second half of the year
- Common tool apps: Often hidden, the Anatsa banking trojan was found in 77 apps and removed after 19 million downloads.
2. Fake banking and financial apps
These apps imitate real banking apps to steal financial information.
- Banking Trojans: such as Frogblight, which targets Turkey but spreads globally, and Albiriox, which manipulates devices for fraud.
3. Spy apps and other malware
Apps that save personal data or send data to external servers
- Spyware: such as Towelroot spread through fake APKs
- For iOS: Vulnerable apps, such as 76 apps that are vulnerable to data interception or sideloaded apps that exhibit risky behavior.
Warning signal! that your device may have been attacked by a “money sucking app”
According to Deepstrike and Zimperium’s 2025 Mobile Threat Report, here are some unusual symptoms to look out for:
- The battery runs out abnormally quickly. Even if not in heavy use
- The machine is very hot all the time.
- There are advertisements that pop up by themselves (Pop-up Ads) even on the home screen.
- The internet runs out quickly because the app secretly sends data in the background.
How to prevent and solve basic problems
From Google’s and OWASP Mobile Top 10 recommendations:
- Do not click on links from SMS or chat apps that claim to be a bank or financial service. To avoid downloading fake apps
- Download only from official stores such as the Google Play Store and App Store, but check reviews, developer name, and number of downloads first.
- Check the app permissions (App Permissions). If it asks for strange permissions, such as an advertising app asking for access to SMS, deny and delete it.
- If you suspect you’re infected with malware, turn on Airplane Mode to cut off your internet, then do a Factory Reset or use an antivirus like Kaspersky to scan and delete it.
summarize
In 2025, the best protection is to regularly update your operating system and use a reliable antivirus. And avoid apps from unofficial sources. According to a Google report, they removed 224 malicious apps after being downloaded 38 million times to keep users safe. Always check the apps on your device to protect your data and assets.
Reference source
- Malwarebytes: Android threats in 2025
- Kaspersky: Attacks on smartphones increased in H1 2025
- Kaspersky: Frogblight Android banking Trojan
- The Hacker News: Albiriox MaaS Malware
- Infosecurity Magazine: 239 Malicious Apps on Google Play
- Zimperium: 2025 Global Mobile Threat Report
- Malwarebytes: 77 Malicious Apps Removed from Google Play
- OWASP: Mobile Top 10 Risks
