Hot topics

New Android app trojan identified in more than 100 million downloads

hacker privacy password crack access security infringe spy 02
© Minerva Studio / Shutterstock

Read in other languages:

Security researchers have found a nasty Trojan in a large number of apps from the Google Play Store. The virus not only ensures that your data is no longer safe, but you may also lose money. In the meantime, the research team is talking about damage that is likely to run into the hundreds of millions.


  • Almost 500 Android apps are infected with a dangerous Trojan.
  • The Trojan works like most viruses on smartphones and costs you cash every month.
  • More than 100 million downloads have been recorded so far.

Do you have time for a scary horror story? Okay, it goes like this: The Google Play Store with over 2 million apps is the place to go for most Android owners. However, it happens again and again that some apps are infected with a virus. Even if you are sure that the app does not contain any viruses when you download it, this is not necessarily the case. The security team of Zimperium has now found another new Trojan in numerous apps and given it the nice name "Dark Herring".

Dark Herring is a virus that has appeared more often in the Google Play Store. The host apps looks serious enough at first glance and the requested permissions do not suggest a virus either. As a result, you download the app in your smartphone and a process is already underway that is not easy to stop.

In the process, your IP address is transmitted to a server and you are redirected to a website. This page is adapted to the language of the device and you have to enter your cell phone number for verification. Once you have done this, you will be charged around 15 dollars on your next phone bill. The Trojan simply signs you up for premium services.

Immense damage and more than 70 countries affected

The problem is that the network providers usually do not show any mercy and you still have to pay the money. This caused damage that, according to estimates from Zimperium, is already in the hundreds of millions. There are 470 infected apps that have been distributed in over 70 countries. Germany, Austria and Switzerland are also affected. Moreover, these are apps that have been widely distributed. The cybercriminals have spread the portfolio so widely that apps from all categories can be found.

Dark Herring chart
The distribution of the 470 apps is widely spread! / © Zimperium

You can find out whether such an app is on your smartphone in a table. All infected apps have been listed on It is best to delete them from your smartphone as soon as possible. The Play Store has also reacted in the meantime and removed all the apps in question from the store, but this does not protect you if you have such an app on your smartphone. I hope the scary story wasn't too scary - but beware of the Dark Herring!

Infected apps with more than a million installs

App name Package name
Airplay Pro com.provideos.airplaypro
Cast It com.casstis.casiits
City Bus Simulator 2 com.bussdriv.citydrivebusimu
Connectool com.combineapparatus.connectool
Connector Box Pro com.proconnector.boxconnector
Crash King com.crashingking.kingcrashgame
Drive Simulator com.dsim.driversimulator
Driving Day
Evo Driving Rover Club Pro com.roverproed.evoprodrivingrover
Football HERO 2021 com.starbestfootball.footballhero
Football Legends com.foootbal.legendsfutballl
GameX Lab com.ggamml.labbgam
Grand Mafia Auto com.grandmafiauto.gma
My Translator Pro com.mytraslt.translpro
New Mobile Games com.nmg.newmgames
Offroad Jeep Simulator com.gmofftrack.offroadjeepgm
Photograph Labs Pro com.exposure.photolabpro
Pictasia com.picmkedit.pictasia
Project X com.px.projxapp
Racing City com.townrally.racingcity
Smashex com.mixcrashing.smashex
Smashex Pro
Speedy Cars - Final Lap com.speedlap.finalcarslap
Stream HD com.highstream.appstreamhd
StreamCast Pro com.strmcas.strmmpro
Translatley Pro com.trasslat.prootrast
Ultra Stream com.ulttistrm.strmultr
Upgradem com.upgrrdm.gradmup
Video Projector com.videoenterprise.videoprojector
VideoProj Lab com.vdoprolab.projjectlab
Vidly Vibe com.vibe.vidlyvibe
VStudio Pro com.proveditstation.vstudiopro
WallpArt Pro com.wartpro.wallproart

What do you think about the virus? Have you ever had a Trojan like Dark Herring or the Joker on your smartphone? Let us know in the comments!

 The best gaming monitors at a glance

  Best gaming monitor up to $400 Best gaming monitor up to $600 Best gaming monitor up to $800 Best gaming monitor up to $1,000 Best gaming monitor for consoles
Image LG Ultragear 27GP850P - product image Asus ROG Strix XG27AQ - product image BenQ MOBIUZ EX3210U - product image Asus ROG Swift PG27AQDM - product image Gigabyte M32U - product image
Go to comment (0)
Dustin Porth

Dustin Porth
Working student

I started my studies to become a technology journalist in 2019. Besides writing a few articles for our student newspaper and for the university magazine "technikjournal", I also wrote IT articles for a blog and then joined tvfindr. There I learned to love writing reviews. I am a passionate gamer myself and am interested in everything that has even slightly to do with technology.

View all articles
Liked this article? Share now!
Recommended articles
Latest articles
Push notification Next article
No comments
Write new comment:
All changes will be saved. No drafts are saved when editing
Write new comment:
All changes will be saved. No drafts are saved when editing