Google removes CamScanner from the Play Store for containing malware
Google Play is full of applications, the problem is that among them there are a large number of malicious apps willing to do their own thing. In the last few hours, Google has had to withdraw one, which was also among the most popular. This is CamScanner, an application to scan documents with the camera,that had a wide range of users at its feet.
It was the Kaspersky researchers who notified Google of what happened.The security company has discovered a Trojan in this app that arrived hidden in a library that contained a malicious module. Apparently, the malware had appeared as a result of a recent update to CamScanner. As we say, the first measure that Google has taken has been to remove it from your app store to see what's going on. Of course, it should be noted that only the free version has been withdrawn, which is the one that had the problem. The paid one continues to appear to buy and download.
CamScanner has been free of malware for a long time. Its creators obtained profitability through the app or by encouraging purchases from the app itself. This module appeared in one of the latest updates, named Trojan-Dropper.AndroidOS.Necro.n, previously seen in some pre-installed apps on Chinese devices . This module was in charge of executing and extracting another malicious module from an encrypted file included in the application's resources.But in turn, the module was capable of downloading more malicious modules according to the intentions of cybercriminals.
The conclusion of all this is that any application can end up containing malware, even if it has a good reputation, hundreds of positive reviews or comes from an official store. Therefore, from tuexpertoapps we recommend that you install a good antivirus for your Android mobile, and that you analyze it from time to time completely to see if it is clean of Trojans and virus. There are some that do this type of scan automatically, so you only have to schedule the weekly times you want it to run.