The two apps have a large number of users but no reviews, a circumstance that suggests the threat actors used an install farm or mobile device emulators to fake those numbers to increase the rank of the apps in the store. The researchers noticed that both app perform more than a hundred transmissions of the collected data, which is unusual for modern spyware. The two apps have been designed to steal a broad range of information, including users’ contact lists, media files (Pictures, audio and video contents), real-time location, mobile country code, network provider name, network code of the SIM provider, operating system version, device brand, and model. We have alerted Google of the discovery before publishing this alert.” reads the analysis published by Pradeo. “They are programmed to launch without users’ interaction, and to silently exfiltrate sensitive users’ data towards various malicious servers based in China. However, the company signaled a new direction by allowing ArDrive Mobile, a decentralized data storage app, on its platform in 2022 and listing the blockchain game Axie Infinity: Origins in select markets.The first app named “File Recovery and Data Recovery” () has over 1 million installs, and the second one named “ File Manager ” (.gkd) has over 500,000 installs.

More recently, Google kicked the blockchain-based game “Bitcoin Blast” off the Play Store in 2021. In 2018, Google banned crypto mining apps, which remain prohibited. The policy change follows a history of Google taking a hard stance against blockchain-based apps. “We partnered with Google to help update their policy, aimed at creating a level playing field that promotes user trust and responsible usage of blockchain technology,” said Matt Williamson, Senior Engineering Manager at Reddit, in a press release.

Reddit, which recently found major success with its Avatar NFTs, partnered with Google to shape the policy. The policy also extends to banning any “loot box” mechanisms in line with their anti-gambling stance. In an effort to foster responsible use, Google will prevent developers from glamorizing potential earnings derived from NFTs.

Under the new rules, games that use tokenized assets will need to clearly state their use of blockchain elements. This move marks a continued shift in the company’s attitude towards blockchain-based technology. Google has announced an update to its Play Store policies, now allowing apps and games that incorporate NFTs onto its platform.

Google play com store