Android barcode scanner infects users

Barcode Scanner, one of dozens of such apps available in the official Google app repository, began its life as a legitimate offering.

Then in late December, researchers with security firm Malwarebytes began receiving messages from customers complaining that ads were opening out of nowhere on their default browser.

Malicious code had been added that was not in previous versions of the app. Furthermore, the added code used heavy obfuscation to avoid detection.

Google removed the app after Collier privately notified the company. So far, however, Google has yet to use its Google Play Protect tool to remove the app from devices that had it installed.