Remove 4 malicious applications immediately to avoid losing information and assets on your phone

(Dan Tri) - Security researchers have just discovered a type of malware that impersonates "clean" applications and is shared directly on the Google Play app store for Android. Users need to immediately uninstall these applications.

Mobile research firm Lookout (USA) has just discovered 4 applications containing the "DCHSpy" malware on Google Play, targeting Android users who need to use virtual private networks (VPN). These applications include Earth VPN, Comodo VPN, Hazrat Eshq and Hide VPN.

The DCHSpy malware, believed to have been developed by the MuddyWater hacker group from Iran, appeared just a week after the Israel-Iran conflict broke out, when demand for VPNs to bypass Internet access restrictions increased.

The Android platform is vulnerable to malware infection because it is an open and fragmented platform (Illustration: Getty).

Once installed, DCHSpy will silently penetrate deep into the smartphone system, collecting sensitive information such as messages, contacts, call logs, location, and recording and taking photos from the victim's device.

The malware also has the ability to take screenshots and record keystrokes to steal passwords for online accounts, including social networks and banks. All stolen data will be encrypted and sent to a server controlled by the hacker.

After receiving a report from Lookout, Google removed the malicious apps from Google Play. However, users who have installed one of the four apps above need to uninstall them from their devices to protect their personal information.

Security experts explain that Android is often the target of hackers more than iOS due to the open source nature and fragmentation of the platform, creating more security holes. Although Google has a mechanism to censor applications, there are still malicious applications that slip through and trick users into installing them.

To protect themselves, users are advised to carefully read comments and reviews of applications on Google Play before installing. Be wary of unrealistic, duplicate or unrelated reviews of the application. Never download application installation files (.apk) from untrusted sources or search engines, as these may be fake applications containing malicious code.

Source: https://dantri.com.vn/cong-nghe/go-ngay-4-ung-dung-doc-hai-de-tranh-mat-thong-tin-tai-san-tren-dien-thoai-20250730160816511.htm