Android users, be careful about where your apps come from.
Recommended deals for you
Apple iPad Air M3 Chip 128GB Wi-Fi 6E 11″ Tablet (2025 Release)
—
$499.99
(List Price $599.00)
Dell 14 Premium Intel Ultra 7 512GB SSD 16GB RAM 2K Laptop
—
$999.99
(List Price $1549.99)
Sony WH-1000XM5 Wireless Noise Canceling Headphones
—
$278.00
(List Price $399.99)
Samsung Galaxy Tab A9+ 64GB Wi-Fi 11″ Tablet
—
$149.99
(List Price $219.99)
Apple Watch Series 11 (GPS, 46mm, M/L Black Sport Band)
—
$359.99
(List Price $429.00)
Products available for purchase through affiliate links. If you buy something through links on our site, Mashable may earn an affiliate commission.
That’s because there’s a new and very sinister-sounding kind of malware going around on Google’s mobile OS, according to the fraud prevention experts at Cleafy (per Android Authority). Called Albiriox, the malware has been known to infect users’ devices, giving bad-faith actors full remote control over the device, at which point they drain the device owner’s bank accounts without even needing a password.
SEE ALSO:
Android 16 QPR2 arrives: 3 new features to check out
Cleafy goes into the nitty-gritty technical details on how this all works, but a basic summary is that the malware is being hidden in fake (but real-looking) Google Play Store download pages for financial apps on external sites. If you hit the download button on one of these pages, which, again, are not actually in the Play Store proper, you may be letting the malware onto your device. From there, it covertly enables the “install unknown apps” permission in the device settings, at which point the really bad stuff gets installed on your device.
Mashable Light Speed
From there, the bad actors can fully, remotely control your device without you noticing, performing actions like swipes and clicks from wherever they are. At that point, the hard part is over, and they can get to draining your bank account. It sounds like the best way to avoid this is to simply not download any weird financial apps from places that aren’t the Play Store. If you stick to downloading apps straight from the Play Store app, you should be fine.
That said, even apps on the official Apple App Store and Google Play Store can contain malware, as we’ve reported previously. Last month, we reported on six malicious Android apps that were recording user data, including WhatsApp messages, phone calls, and even background audio.
