{"id":47405,"date":"2016-02-04T16:27:40","date_gmt":"2016-02-05T00:27:40","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=47405"},"modified":"2025-08-06T23:55:50","modified_gmt":"2025-08-07T06:55:50","slug":"android-game-malware","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/mobile-security\/android-game-malware\/","title":{"rendered":"Android Users, Beware: 60 Games in Google Play Deemed Malicious"},"content":{"rendered":"

It\u2019s no secret that mobile games are designed to be addictive. Unfortunately, this can be to our disadvantage. It\u2019s all too easy to get carried away in the midst of a competitive game, often resulting in our putting security concerns on the back burner.<\/p>\n

Just this week, new malware<\/a> was found hiding in 60 Android games<\/a> in the Google Play store, putting countless devices at risk of hijacking. Researchers identified the threat as Android.Xiny.19.origin<\/a>, and it allowed hackers to steal sensitive information and control the behavior of users\u2019 phones.<\/p>\n

While people were busy tilting their phones in a virtual motorcycle race, this malware was operating in the background. It displayed unwanted advertisements and prompted users to install various software, then sending device data to a remote server<\/a>.<\/p>\n

While the exact motivation for the attacks remains unclear, it appears the crooks responsible were playing their own type of game. And what\u2019s worse, they were able to get around Google Play\u2019s safeguards using advanced tactics to bypass detection.<\/p>\n

Now traditionally, any device hijacking happens through the insertion of malicious computer code into an application. However, this instance involved a technique known as image file steganography<\/a>. These rogue games demonstrated Trojan<\/a>-like functionality, allowing them to download malicious code through in-app images. Simply put: instead of hiding<\/em> malware, the perpetrators disguised <\/em>the malware to look like image files\u2014which is how they were able to get past Google\u2019s safety checks.<\/p>\n

Despite this incident with Google Play, users do have equal responsibility in protecting against malicious attacks. While Android.Xiny.19.origin was a special instance, the majority of infections from apps are simply the result of downloads from third party marketplaces. It turns out the appeal of mobile games, whether involving laying with virtual cats or arranging colored blocks, is hard to resist. No surprise there.<\/p>\n

Tips to Stay Safe While Downloading Apps<\/h2>\n

So, how can you download, and play, mobile app games responsibly and securely?<\/p>\n