Warning this Android antivirus is actually a virus

If you’ve recently downloaded a new antivirus app on your Android phone, it might be time to double-check what’s really running in the background. A new malware campaign is making the rounds—and it’s disguising itself as the very thing that’s supposed to protect you.

Experts are warning that what looks like a harmless security app is actually a spyware threat, and it's already compromised a number of devices.

A sneaky disguise with a dangerous payload

According to cybersecurity specialists at Dr.Web, the malware—known as Android.Backdoor.916.origin—is being distributed through apps that look completely legitimate at first glance. One version poses as an antivirus, while another pretends to be an official banking app tied to the Russian central bank.

The strategy? Trick users into granting high-level permissions, like access to your camera, microphone, or keyboard history, all under the guise of improving your phone’s security. Once installed, the app quietly monitors activity, harvests sensitive data, and could even record conversations or access photos—without raising any red flags.

Fake antivirus, real risk

What makes this threat particularly effective is its disguise as a security tool. When users download an antivirus app, they’re usually more willing to approve permissions, assuming it’s all part of keeping their device safe. This gives the malware exactly what it needs—full access to private files, messages, and more.

While the fake antivirus app appears to be distributed primarily in Russian and may be targeting businesses in Russia, the tactic is by no means limited to one region. Malware campaigns are notoriously adaptable, and similar threats could be just as easily rebranded and pushed to users in other countries.

Stay vigilant, wherever you are

This latest spyware scare is yet another reminder that not all security apps are created equal. If you're downloading tools outside of trusted app stores—or if you’re tempted by an app that promises “complete protection” with no reviews or vague details—it’s worth taking a step back.

Always research apps thoroughly, stick to official platforms like Google Play, and consider installing a well-known, verified antivirus from a reputable cybersecurity provider.

In a world where malicious software is increasingly disguised as something helpful, it pays to be cautious. Because sometimes, the biggest threats are the ones pretending to keep you safe.