216.73.217.139

Hidden Google Play Adware Drains Devices and Disrupts Millions of Users

· Published 27/11/2025 18:32 · Modified 21/12/2025 18:08

Export JSON

Essential information

Published
27/11/2025 18:32
Modified
21/12/2025 18:08
Tags
2025-11-27 advertising sdks adware android app removal east asia ghostad google play persistence resource drain southeast asia
Related entities
5 observables, 1 malware, 3 others

Description

A large-scale campaign dubbed '' has been uncovered, affecting millions of users primarily in East and . The campaign involved multiple apps on that appeared harmless but created persistent background advertising engines, draining device resources and disrupting normal phone use. These apps used foreground services, job schedulers, and continuous ad refreshing to maintain their presence even after users closed or rebooted their devices. The integrated multiple legitimate but violated fair-use policies by continuously loading ads without user interaction. Users experienced battery drain, reduced performance, and difficulty in removing the apps. Google has since removed the identified apps from the Play Store and disabled them via Protect.

External references