In Google Play were found more than a dozen applications downloading Joker (Bread) trojan. This malware is notable for the fact that it secretly subscribes to premium services. Malware can also intercept SMS, steal confidential data and contact lists, install a backdoor, generate fake reviews, and display intrusive ads.

This behavior was demonstrated by the following applications (already removed from the store):

• com.daynight.keyboard.wallpaper (Keyboard Wallpaper)

• com.pip.editor.camera2021 (PIP Photo Maker 2021)

• com.light.super.flashlight (Flashlight)

• com.super.color.hairdryer

• com.super.star.ringtones (Pop Ringtones)

• org.my.favorites.up.keypaper

• com.hit.camera.pip

• com.ce1ab3.app.photo.editor

• cool.girly.wallpaper

• com.photo.modify.editor (Picture Editor)

• com.better.camera.pip (PIP camera – Photo Editor)

• com.face.editor.photo (Photo Editor)

• com.background.wallpaper.keyboard (Keyboard Wallpaper)

Source: anti-malware.ru