Grifthorse Android Trojan Has Infected Over 10 Million Devices GA S REGULAR Menu Lifewire Tech for Humans Newsletter! Search Close GO News > Internet & Security

Grifthorse Android Trojan Has Infected Over 10 Million Devices

It has been active since November 2020

By Joshua Hawkins Joshua Hawkins Freelance Technology Reporter Full Sail University Josh Hawkins is a freelance writer for Lifewire who loves writing about the latest tech and gadgets that help make people’s lives easier. As an avid gamer and VR enthusiast, he also enjoys diving deep into the technology that helps bring those kinds of experiences to life. lifewire's editorial guidelines Updated on September 30, 2021 04:23PM EDT Fact checked by Rich Scherr Fact checked by Rich Scherr University of Maryland Baltimore County Rich Scherr is a seasoned technology and financial journalist who spent nearly two decades as the editor of Potomac and Bay Area Tech Wire. lifewire's fact checking process Tweet Share Email Tweet Share Email Internet & Security Mobile Phones Internet & Security Computers & Tablets Smart Life Home Theater & Entertainment Software & Apps Social Media Streaming Gaming Over 10 million Android users have had their smart devices infected by a new malware called Grifthorse, which bombards them with various prize notifications. According to a security report from Zimperium zLabs, the trojan malware can be found in over 200 malicious apps approved to appear on the Google Play Store. It also was found in third-party app stores. At this point, Zimperium says that the trojan has managed to steal tens of millions of dollars from its victims. NicoElNino / Gettys The way that Grifthorse works is by bombarding users with a ton of notifications about prizes and special discounts. They are then sent to a web page, where they are asked to sign up with their phone number to confirm entry. Instead of being entered into any discounts or giveaways, the user’s phone number is often entered into various SMS subscription services, some of which can cost up to $35 a month. Zimperium has put together a list of the applications infected with Grifthorse on its website. The company also says that Android users in over 70 countries have been affected by the trojan, including the United States, Russia, China, India, Brazil, and more. Zimperium zLabs Grifthorse was most active from November 2020 to April 2021 before it was discovered, and Google already has removed the malicious applications from the Play Store. However, infected applications are still available on some unsecured third-party stores. To avoid downloading infected apps, Zimperium recommends not sideloading applications on your Android device if you are unsure of the app’s security and origin. Was this page helpful? Thanks for letting us know! Get the Latest Tech News Delivered Every Day Subscribe Tell us why! Other Not enough details Hard to understand Submit More from Lifewire Is Google Play Safe? 3 Best Free Antivirus Apps for Android Phones Can a Router Get a Virus? How to Use Amazon Kids Unlimited Can Chromebooks Get Viruses? How to Fix 'The File or Directory is Corrupted and Unreadable' Errors Protect Yourself From Malicious QR Codes Are iPads Really That Safe from Viruses and Malware? Can a Smart TV Get a Virus? How to Cancel a Frozen App Download on Android A Brief History of Malware How to Install Kodi on Android Scanguard Ultimate Antivirus Review: Everything You Need to Know What Is an Android Tablet? What Is a Cyber Attack and How to Prevent One Hidden Android Administrator Apps Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. Cookies Settings Accept All Cookies