Scworld
Cellik Android Malware Offers Trojans via Google Play Apps
First seen 18 Dec 2025, 17:52 UTC
•
•78% similarity
•47.4
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
Cellik, a new Android malware-as-a-service, allows attackers to create trojanized versions of legitimate apps from the Google Play Store. This malware can evade Play Protect defenses and offers capabilities such as real-time screen capturing, notification interception, and file exfiltration. The service was discovered on underground forums by mobile security firm iVerify.
ThreatCluster AI
How this analysis works