APKPure, an unofficial app store for Android platform, has been infected with malware that could install dangerous Trojans to your Android devices, says cybersecurity firm Kaspersky in a blog post.
APKPure is an app store for Android users that offers free or shareware apps. Android users are always advised to download apps only from the official Google Play Store as the veracity of the apps from unofficial sources being safe to install always stays doubtful. As per Kaspersky researchers, the APKPure app itself hasn’t passed its tests; the APKPure version 3.17.18 is “fitted with an advertisement SDK, one with an embedded Trojan dropper, which Kaspersky solutions detect as HEUR: Trojan-Dropper.AndroidOS.Triada.ap.”
When unpacked, the Trojan can wreak havoc on the device it gets installed on and can sabotage the system in multiple ways like “show ads on the lock screen, open browser tabs, collect information about the device” and has also the capability to download other malware. As per the researchers, there are a number of Trojans masquerading as the APKPure apps and which variant can attack your device depends on the Android version and the user installed security updates. For example, in devices running Android 8 or higher, the Triada Trojan can get downloaded. In older versions of Android, like 6 or 7, or Android devices which do not have the security updates installed, it could be the xHelper Trojan.
As per the report, APKPure has released an updated version 3.17.19 on its website. The description on the APKPure website says that the update “Fixed a potential security problem, making APKPure safer to use.” Kaspersky says that this version is safe to use.