Malware has appeared in the Galaxy Store

Malver is a problem of the Google Play store and according to the portal AndroidPolice competing trade has not escaped now Galaxy Store from Samsung. Several clones of pirated Showbox applications in it may be able to infect Android devices with malware.

The applications serve as Trojan horses

Max Weinbach from the portal AndroidPolice has noticed several apps built on the Showbox distributed in the Galaxy Store run after installing the Google Play Protect alert. Analysis of some of these applications using Virustotal shows more than a dozen lower-level alerts.

I gave Huawei shit for this, gonna do it to Samsung too.

Samsung is hosting literal malware on the Galaxy Store. Google’s anti-virus protection software, built into Play Services, stops the install.
I’ve found at least 5 of these apps in a row on the Galaxy Store. pic.twitter.com/LiiDJtGwmb

— Max Weinbach (@MaxWinebach) December 27, 2021

Some applications also require more permissions than they should, including access to contacts, a call log, and the phone call itself. The in-app ad system has also been shown to be able to execute dynamic code execution. While the application itself may not directly contain the malware, it can later download and run other code that could include the malware. Basically, it’s a Trojan horse.

All of these apps are clones of another well-known app called Showbox, which provided access to copyrighted content, including movies and TV shows. However, the showbox has been “down” for almost two years, so third-party websites and applications with this description are “counterfeits.” None of the discovered apps are in the Google Play store.