Skip to content
Cellik Android Malware Offers Trojans via Google Play Apps

Cellik Android Malware Offers Trojans via Google Play Apps

First seen 18 Dec 2025, 17:52 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

Cellik, a new Android malware-as-a-service, allows attackers to create trojanized versions of legitimate apps from the Google Play Store. This malware can evade Play Protect defenses and offers capabilities such as real-time screen capturing, notification interception, and file exfiltration. The service was discovered on underground forums by mobile security firm iVerify.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 183d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Cellik in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed