223 malicious apps removed from the Google Play Store after ad fraud campaign discovered

On 17 September 2025, Malwarebytes reports that 224 malicious apps were removed from the Google Play Store after a large ad fraud campaign was uncovered.

According to the Satori Threat Intelligence and Research team, the apps were downloaded more than 38 million times and generated up to 2.3 billion ad requests per day, with the campaign dubbed “SlopAds.” The campaign used WebView to relay device and browser data to a C2 server, which then determined which domains to visit in hidden WebViews, and researchers noted an AI tool training on the same domain as the C2 server.

Google removed all identified apps listed in the report, and Google Play Protect offers protection by warning and blocking such apps at install time on certified Android devices. The article also provides guidance on avoiding installation of malicious apps, including checking permissions and verifying app developers before downloading.