Malicious applications for Android have been downloaded millions of times.

A new set of malicious applications belonging to the SpyLoan malware family has been identified and removed from the Google Play Store. These apps, which promised quick and affordable loans, turned out to be scams that extort money and harass their victims.

Despite being removed, the 15 applications in question had amassed millions of installations worldwide before detection. Known as "predatory loan apps," they used deceptive tactics to make users lose money. Once installed, these applications requested permissions to access contacts, text messages, camera, call logs, and the device's location.

These apps were designed to masquerade as personal finance software, promising quick loans and low rates. However, the rates and requirements they offered turned out to be fraudulent. By accepting the service, users faced very high interest rates and, if they complained, could be subjected to harassment, blackmail, and even threats to their families.

McAfee researchers found that these applications collectively had around eight million downloads, highlighting that the top four reached one million each. It was determined that the main affected markets were South America, Southeast Asia, and Africa, with Mexico, Colombia, and Senegal being the most impacted countries. Once a user installs the application, a one-time code is sent to identify their location and determine whether to proceed with the scam.

This finding highlights a significant concern, given that the applications were available on Google's official store. Although Google is known for its strict guidelines for app publication, this incident demonstrates that consumers should not blindly trust any platform, even Google, and should always verify the legitimacy of the applications they download.

To ensure that an app is legitimate, it is recommended to check its rating, the number of downloads, and reviews from other users. It is also important to verify that the reviews are not generated by bots and to read some of the lower ratings to identify potential issues.