400+ Million Downloads Infected: The Shocking Spread of the SpinOk Android Malware

June 6, 2023
1 min read
Army Red Android Unique Virus Different Robot

Over 100 Android apps with more than 400 million downloads combined have been infected with a new malware strain called ‘SpinOk’. The malware was distributed as a software development kit (SDK) for advertisers. Security researchers at Dr. Web and Bleeping Computer discovered and reported the spyware module inside the affected apps.

SpinOk is considered spyware because it steals private data and sends it to a remote server controlled by hackers. App developers added the SpinOk module to their apps, using minigames to provide users with “daily rewards.” SpinOk checks sensor data on Android devices to determine if it’s running on an actual phone.

Malware attacks remain a common tool in the online world, as hackers exploit vulnerabilities to steal sensitive information or money. When malware gains access to devices, the severity of the attack increases dramatically. Dr. Web and Bleeping Computer discovered the spyware SpinOk in more than a hundred apps on the Google Play Store.

The infected apps have been downloaded a total of 400 million times. Some of the affected apps with high downloads include Noizz, Zapya, vFly, MVBit, Biugo, Crazy Drop, Cashzine, Fizzo Novel, CashEM, and Tick. Most vulnerable apps are now unavailable on the Play Store, but some may still be present. Users should delete these apps immediately or update them to the latest version. SpinOk cleverly poses as an advertising Software Development Kit (SDK) and deceives consumers with minigames and daily prizes. Unknowingly, many download the software, leading to the theft and transmission of personal information.

The SpinOk module aims to keep users engaged through minigames, task systems, and attractive rewards. The infected apps varied in severity, with some still containing active malicious software. The trojanized SDK connects to a remote server to download a list of websites that display minigames.

SpinOk performs malicious activities such as listing files, searching for specific files, and uploading files. It can exfiltrate private images, videos, and documents, as well as modify the clipboard to steal passwords and credit card data. It is unclear whether the publishers included the trojanized SDK intentionally or were tricked by a third party.


Similar Post


The large number of downloads makes many Android users vulnerable to these cyber dangers. Caution is madatory when downloading new apps, even from the Google Play Store. Checking an app’s rating and reading reviews can help, but be aware that ratings and reviews can be faked.

External reviews and video reviews provide additional insight before installing an app. Be cautious of apps that request unnecessary permissions. Consider installing an Android antivirus app for additional protection.

Google Play Protect comes pre-installed on Android phones and can scan existing and new apps for malware. Further investigations by Google and others will likely reveal more about SpinOk and its presence in popular Android apps. Stay informed and cautious to protect yourself from bad apps and malware threats.

Android apps with spyware installed 421 million times from Google Play (bleepingcomputer.com)

Rahul Somvanshi

Rahul, possessing a profound background in the creative industry, illuminates the unspoken, often confronting revelations and unpleasant subjects, navigating their complexities with a discerning eye. He perpetually questions, explores, and unveils the multifaceted impacts of change and transformation in our global landscape. As an experienced filmmaker and writer, he intricately delves into the realms of sustainability, design, flora and fauna, health, science and technology, mobility, and space, ceaselessly investigating the practical applications and transformative potentials of burgeoning developments.

Leave a Reply

Your email address will not be published.

Previous Story

One of the World’s Largest Carbon Time Bombs: Unveiling the Massive Logjam Hidden in the Arctic

Next Story

GE’s Quest for Sustainable Carbon Capture Solutions: From Air to Solution

Latest from Computing

Don't Miss

First printed in Bryant & Gay, 1883. Wood carving by E. Bayard.

Humans, Not Climate, Key to Ancient Giants’ Fall: Aarhus Study Reveals

For years, scientists have debated whether humans or