There’s a worrying new warning for Android users and you’d be wise not to ignore it. The latest threat to target these hugely popular devices comes via apps laced with the vicious Necro Trojan which, once installed, can go about stealing data and even signing users up for expensive subscriptions without their permission.

Necro was first discovered by the security team at Kaspersky back in 2019 and it’s just made an unwanted return with some 11 million Android users thought to have been infected during this latest wave of attacks.

It appears the majority of users being caught out by the bug are downloading and side-loading so-called ‘mods’ of well-known apps – such as Spotify and WhatsApp – via unofficial stores.

These applications usually claim to offer features not found in the standard versions of the software which is why they appear so enticing.

However, what makes Necro even more worrying is that it’s not just those unofficial apps that appear to be affected with some users also getting infected via apps found on Google’s Play Store.

According to Kaspersky, one application called Wuta Camera was downloaded over 10 million times from Google Play before Necro was discovered and removed from the photo editing service.

In a bid to stop more users from becoming a victim of Necro, Kaspersky has issued some vital advice which you are wise not to ignore.

Here are the top tips for avoiding Necro

• Kaspersky strongly advises against downloading apps from unofficial sources because the risk of device infection is extremely high. Secondly, apps on Google Play and other official platforms should also be treated with a healthy dose of skepticism. Even a popular app like Wuta Camera, with 10 million downloads, proved powerless in the face of Necro. Make sure to protect your devices so as not to be caught off guard by a Trojan. 

• Check the app page in the store before downloading. Kaspersky says it recommends looking at reviews with low ratings, as these generally give heads-up about potential pitfalls. Rave reviews could be fake, while a high overall score is easy to inflate.

• Don’t look for mods or hacked versions. Such apps are almost always stuffed with all kinds of Trojans: from the most harmless to mobile spyware like CanesSpy.