Security researchers discovered a new Android Trojan with malware dropper and spyware capabilities in 24 Google Play Store apps with more than 472,000 downloads in total. The new Android malware dubbed ‘Joker’ is hidden within advertisement frameworks used by the compromised apps. The Trojan is designed to download a second-stage component as a DEX file that adds more capabilities. Only Android users from a very specific list of countries are currently targeted by the Joker Trojan. Google has removed all Joker-infected apps from the Play Store without the researchers having to report any of them.
Source: https://www.bleepingcomputer.com/news/security/stealthy-android-trojan-spy-signs-you-up-for-premium-subscriptions/