Android Phones hit by 'Judy' Malware

More than 36 million Android devices may have been infected with ad-click malware, a security firm has said.

Researchers at Check Point said they found the malware, dubbed Judy, on about 50 apps in Google's Play Store.

The apps contain code that sends infected devices to a target webpage, where they generate fraudulent clicks on the site's adverts to make money for its creators.

The infected apps have been removed from the Play Store.

More than 40 of the apps were from the South Korean developer, Kiniwini, which publishes games to the Play Store under the name Enistudio.

The games, all of which feature a character called Judy, have been downloaded between four million and 18 million times.
'Hid undetected'

The malicious code was also found in several apps from other developers.

"It is possible that one borrowed code from the other, knowingly or unknowingly," said Check Point.

Between them, the infected apps may have been downloaded up to 36.5 million times.

Check Point said it did not know for how long the malicious versions of the apps had been available, but all the Judy games had been updated since March this year.