Google has removed 17 suspicious apps from Google Play Store. The 17 apps, spotted by security researchers from Zscaler, were infected with the Joker (aka Bread) malware.
This spyware is designed to steal SMS messages, contact lists, and device information along with silently signing up the victim for premium wireless application protocol (WAP) services.
The following are the names of the infected apps we discovered on the Google Play store:
- All Good PDF Scanner
- Mint Leaf Message-Your Private Message
- Unique Keyboard – Fancy Fonts & Free Emoticons
- Tangram App Lock
- Direct Messenger
- Private SMS
- One Sentence Translator – Multifunctional Translator
- Style Photo Collage
- Meticulous Scanner
- Desire Translate
- Talent Photo Editor – Blur focus
- Care Message
- Part Message
- Paper Doc Scanner
- Blue Scanner
- Hummingbird PDF Converter – Photo to PDF
- All Good PDF Scanner
Joker is one of the most prominent malware families that continually targets Android devices. Despite awareness of this particular malware, it keeps finding its way into Google’s official application market by employing changes in its code, execution methods, or payload-retrieving techniques.
Bijay Pokharel
Bijay Pokharel is the Founder and Editor-in-Chief of Abijita, an independent technology and cybersecurity news publication established in 2017. A specialist in cybersecurity journalism, Bijay covers vulnerability research, malware analysis, enterprise data breaches, digital privacy, and emerging technologies. His work translates complex technical threats into precise, accessible, and actionable intelligence for security professionals and general readers alike. His reporting and investigative coverage are routinely cited and republished across leading technology and security media.



