A client-side vulnerability in the Google Play Core Library, patched by the company in April, is still present in many Android apps because developers are yet to include the patch into these apps.
Tel Aviv-based security firm Check Point has revealed details of a new variant of the Joker Dropper and Premium Dialer spyware in the Google Play Store, adding that the malware was found to be hiding in legitimate applications.
Security firm Check Point says it has encountered fresh samples of the Black Rose Lucy malware-as-a-service family, that it discovered in 2018, which have an added functionality: ransomware.