Google Play Early Access exploitation by malicious apps

Security researchers have identified a trend where cybercriminals exploit the Google Play Early Access program to distribute malicious and deceptive applications. Because this program allows developers to test unfinished software, it lacks the public ratings and user reviews that typically help users identify fraudulent content.

Initial reports from Bitdefender highlighted thousands of suspicious apps, including fake casino games, reward-based apps that fail to pay out, and utilities like QR scanners that request excessive permissions. Attackers have also used high-profile names to intercept searches, such as apps titled ‘Grand Theft Auto V (Early Access)’ that rename themselves after gaining downloads. These apps are often promoted via social media using AI-generated deepfakes of celebrities to build false trust.

Subsequent findings identified a specific campaign known as SilkParasite, which utilizes the Early Access feature to bypass public warning systems. Researchers noted a connection to China regarding these activities. Additionally, the scope of deceptive software on the platform has expanded to include counterfeit versions of the Huawei Health application, which use official icons to deceive users seeking wearable software.