The Fleckpe Trojan Malware infects 620,000 Android devices by sneaking through photo editing and wallpaper applications.

The Google Play application marketplace for Android is targeted by the Fleckpe subscription trojan, which was recently found by Kaspersky’s security research team.

This Trojan spreads via picture editing and wallpaper apps and tricks users into accidentally subscribing to paid services.

Fleckpe has infected more over 620,000 devices globally since its detection in 2022.

This trojan has been discovered in Indonesia, Malaysia, Singapore, and Poland, however it predominantly targets victims in Thailand.

The majority of people who review infected apps on Google Play are Thai speakers. Although our telemetry shows that there were victims in Poland, Malaysia, Indonesia, and Singapore, it leads us to suspect that this specific virus is targeting users from Thailand, according to Kaspersky, who was mentioned by Kompas. TV on Monday, August 5, 2023.

Apps with the Fleckpe infection may look legitimate, but they contain malicious droppers that can execute and decrypt payloads from app components.

This payload establishes a connection between the infected device and the command-and-control server of the attacker and transmits data about the device.

The victim will then lose money since the Trojan will install the paid service on their device without their permission.

Unaware that they are (automatically) subscribing to subscription services, victims continue to use the application’s features, such as changing backgrounds or editing images.

Users are advised by Kaspersky specialists to exercise caution while downloading apps, even from recognized stores like Google Play.

Additionally, always double-check the permissions that installed programs have granted.

The following is a list of programs that include the Fleckpe malware.