Android bug posing as popular apps stealing private data

Android users are being warned a new bug that allows hackers to access private data and gain remote access to "infected" devices.

The new bug is called Arsink, and it is an Android Remote Access Trojan (RAT).

"Arsink is a sophisticated malware that actively exfiltrates information, transmitting it directly to its operators while affording them complete remote control," Zimperium explained.

More than 45,000 devices have already been infected by this virus, according to the tech experts, across 143 countries, including in the UK.

Android users are being tricked into downloading "pro" versions of official-looking apps, Zimperium said.

These apps are usually advertised on social media and other similar platforms, rather than the official Google Play Store.

Once these apps are downloaded, the Arsink bug gets to work within the device, allowing hackers access to:

Android users are being tricked into downloading "pro" versions of official-looking apps like , Instagram, and Tik Tok. (Image: PA)

The bug also allows hackers to remotely control certain features of infected devices, including:

Zimperium added: "In most cases, the apps don’t deliver real features, they display a minimal UI (user interface), immediately request sensitive permissions, and then operate silently."

The sophisticated malware hides its icon to reduce detection and launches a foreground service that keeps running despite task killers.

It will also display persistent notifications to prevent the service from being terminated.

— Zimperium (@Zimperium) August 18, 2025

As mentioned previously, the Arsink bug is hidden within "pro" versions of official-looking apps, which trick users into downloading the malicious software and granting it "extensive" access.

Around 50 well-known brands are being used, including:

If you come across any "pro" versions of official-looking apps outside the Google Play Store, be sure to avoid them.

If you have already installed one, delete it immediately.