A battery-saving app enables attackers to snatch text messages and read sensitive log data – but it also holds true to its advertising.

The Sun Team APT, likely linked to North Korea, uses Google Play and Facebook as attack vectors.

The authors behind the Android banking malware family Svpeng have added a keylogger to a recent strain, giving attackers yet another way to steal sensitive data.

Over the course of two months last year the Copycat malware infected 14 million Android devices and rooted more than half of them, roughly eight million devices.

Google removed a rooting an Android Trojan called Dvmap from Google Play that injects malicious code into an infected device’s system library.

More than a dozen apps removed from Google Play store after it was determined they were overly aggressive adware.

A new version of the SpyNote Trojan is designed to trick Android users into thinking it’s a legitimate Netflix application.

Google has removed 20 apps from Google Play that were spreading a variant of the HummingBad Android malware called Hummingwhale.

The Gooligan Android malware steals Google authentication tokens from mobile devices to breach user and corporate accounts.

Researchers have found a phony Flash Player download for Android that installs banking malware and steals banking credentials.