The National Telecommunication and Information Security Board (NTISB) issued a cybersecurity advisory warning about recently discovered malicious Android apps removed from the Google Play Store.
In March 2025, Google removed apps linked to KoSpy spyware and Anatsa (TeaBot) banking trojan, disguised as file managers or security tools, posing threats to user privacy and mobile security.
KoSpy spyware, associated with North Korean threat groups, can access various data, while Anatsa banking trojan targets financial apps for data theft.
Users are advised to uninstall identified malicious Android apps, download only from trusted sources, avoid apps with unnecessary permissions, and enable Google Play Protect for automatic detection of harmful apps.