Beware of Malicious Android Apps with Over 620K Downloads on Google Play.

Fleckpe, a new Android subscription malware, has been discovered on the Google Play Store, with over 620,000 downloads since 2022. The malware masquerades as legitimate photo editing apps, camera, and smartphone wallpaper packs, primarily targeting users from Thailand. The payload is designed to contact a remote server and transmit information about the compromised device, following which the server responds back with a paid subscription page. Fleckpe joins other fleeceware families like Joker and Harly, which subscribe infected devices to unwanted premium services and conduct billing fraud.