According to a recent study by RiskIQ's security researchers, over 660 apps containing dangerous malware are still available for download through 20 official App Stores. The cybercriminals are not only targeting smartphone owners' wallets but also their personal data. Unfortunately, until now, very few App Store operators have been able to check the software offered there for any loopholes.

![pexels-photo-193349.jpeg](https://steemitimages.com/DQmPzhfyyTefz3rYAX7dt6FanVLM9MhinW8fkYgRmtvnAar/pexels-photo-193349.jpeg)

The behavior of app store operators has apparently changed little since the last warning of malware in November last year. For reasons of time, many companies allow the download of an update or a new app without any checks. RiskIQ's security researchers have tested 18,408 apps for a wide variety of operating systems on various download portals such as APKPlz, SameAPK, Apple's App Store, Google Play etc. for backdoors. At the Android Store Google Play, with 272 malicious programs, the highest proportion was found. A total of 661 apps failed the exam. The result was far more negative for High-Tech-Bridge. In comparatively superficial tests, 90 % of all cases found errors in programming or in the transfer of sensitive data, which meant that users could easily access their mobile credit balance. However, the examination of high-tech bridges was limited to apps for Android smartphones only.

The cybercriminals operate on a global scale in an almost "lawless digital world", commented RiskIQ manager Fabian Libeau on the results of the current survey. Those who entrust their coins to an app should choose them carefully. In particular, the number of downloads and customer reviews should be considered in the App Stores before any installation to reduce the risk. Alternatively, there is the possibility to use only official apps of the online trading places, where you are already registered anyway. This also applies if alternative apps have a comparable or even greater range of functions.

Unfortunately, there is no list of malware affected apps and their source in this press release.

The Californian security company RiskIQ also found out that several hackers spent a lot of time on search engine optimization. If you want to hide a backdoor in your own software, ask first which search terms were frequently used for the name or description of the app. Most hackers have included keywords such as "bitcoin exchange","bitcoin wallet" or "cryptocurrency" in their English app stores to maximize the number of possible installations of their apps and thus maximize their revenue.