The APKPure app, an alternative to the Google Play Store, was infected with rogue adware. This caused unwanted advertising on Android devices, but could also cause money to be stolen secretly via paid subscriptions in the Play Store.
It discovered Kaspersky Lab . It argues that the issue likely started when the APKPure developers implemented a new rogue ad SDK from an uncontrolled source, similar to what happened with CamScanner . In addition to showing advertisements and taking out subscriptions, the malware can also download other malware. This is APKPure version 3.17.18.
The developers of APKPure have been notified and have taken immediate action: version 3.17.18 dropped off the site and has been replaced by 3.17.19. Users with the affected version are advised to scan their device for further malware after removing the affected app.
APKPure is an alternative to the Google Play Store, for those who, for example, do not want to work with a Google account, or prefer not to allow their data collection. In addition, the site offers older versions of apps, which the Play Store does not. In the Tweakers background story Android Without Google , APKPure is also recognized as a possible alternative to the Play Store, but so are the risks. An alternative to APKPure is again APKMirror , which is run by Android Police.