This Android malware hacks into your Google account, installs third-party apps

The virus is affecting an estimated 13,000 devices a day

If you're an Android user, you might be at risk because of a malware that breaks into your Google account.

According to a report by Check Point, a cyber Security company, the malware, Gooligan, has affected over 1 million accounts, with 13,000 devices being targeted every day.

Over 1 million Google accounts may have been breached by #gooligan malware https://t.co/pCQy15oJak pic.twitter.com/xOh2TIlJKB

— Android Authority (@AndroidAuth) November 30, 2016

By stealing authentication tokens used to access data from Google Play, Gmail, Google Docs and Google Drive; Gooligan installs certain apps on your phone and starts rating them highly.

PHOTO COURTESY: CHECK POINT

By installing adware on those apps, it generates revenue, and is reportedly raking in as much as $320,000 a month.

The malicious code, according to the report, primarily affects devices running on Android Jelly Bean, KitKat and Lollipop.



About 19% of the hacked accounts are in North and South America, whereas 9% in Europe. Asia has so far been the most volatile region - 57% users affected.

PHOTO COURTESY: CHECK POINT

To avoid being affected, simply download apps from the official Google Play store. Check Point has also built a site to check if your Google account has been compromised.

Over 1 million Google accounts may have been breached by #gooligan malware https://t.co/pCQy15oJak pic.twitter.com/xOh2TIlJKB

— Android Authority (@AndroidAuth) November 30, 2016

In case your device was affected, you need to take the following steps:

1. You need to flash your device. It is better if you approach a certified technician as flashing is a complex process.

2. Change your Google account passwords immediately after this process.

Adrian Ludwig, Google’s director of Android security said the security team had been working closing with Check Point to "investigate and protect users."



He also confirmed that Gooligan uses Google credentials on older versions of Android to generate fraudulent app installs.

"We’ve taken action to protect our users and improve the security of the Android ecosystem overall," he wrote. The company has found no evidence of the hackers accessing user data, he added.

You can check it here if your Google account was breached: https://gooligan.checkpoint.com/

This article originally appeared on Mashable