You always need to be careful about the apps you install on Android, even if you download them directly from Google Play. Researchers have found at least 5 different apps, which have passed Google Play’s security vetting, are actually malware spying for the North Korean government.

Google has removed apps infected with KoSpy spyware from the Play Store. Users should delete affected apps immediately, enable Play Protect, and avoid third-party downloads to protect their data from potential threats.

Cybersecurity researchers at Lookout have discovered KoSpy, a sophisticated Android spyware linked to North Korea that has managed to infiltrate the Google Play Store. The malware is attributed to ScarCruft (APT37),