Android Malware Campaign Uses Fake Document Reader App with 100K Google Play Downloads

Gbhackers •Mayura Kathir • June 24, 2026

Android Malware Campaign Uses Fake Document Reader App with 100K Google Play Downloads tracks a fresh Anatsa campaign that abused trust in a seemingly useful document-reader app to reach a large install base before its payload was activated. The malicious app was published as a document reader and file utility, a category that normally attracts […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Document Reader App on Google Play Delivers Android Banking Trojan A newly identified Android malware campaign is exploiting a fake document reader app, which has amassed over 100,000 downloads on the Google Play Store. This app masquerades as a legitimate file utility but contains a banking trojan that poses significant risks to users' financial and personal data. The malicious payload activates after installation, targeting Android devices and potentially leading to financial theft. The campaign highlights ongoing vulnerabilities in app store security and the need for users to be cautious about app permissions and sources. As of now, the app remains available for download, increasing the urgency for user awareness and action. 3 sources 66

Extracted Entities

Android Malware Campaign Uses Fake Document Reader App with 100K Google Play Downloads

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Malware (1)

Platforms (1)