A fake app impersonating the Chrome browser hacks into the Google Play Store

Listen to the article. The audio text is automated, generated by an automated system

A fake application succeeded in appearing on the Google Play Store despite imitating the name and icon of one of Google's most famous applications, the Chrome browser, achieving more than 100,000 downloads before the company intervened and deleted it from the store.

Questions have long been raised about the efficiency of the screening mechanisms that Google relies on to review new applications before making them available on the Google Play Store.

Several applications had previously appeared in the official Android store, but were later found to contain malware, before the company moved to remove them.

There are reasons that explain the ability of some malicious applications to bypass Google's protection systems, according to a report published by the "Phonearena" website and viewed by "Al Arabiya Business."

In many cases, the developer submits an application that is simple and devoid of obvious malicious code, and it passes the security check. But after being installed on the user's device, the app connects to an external command and control (C2) server, which can download the actual malicious code to the device as an update.

In a new incident, an application was able to bypass Google's security screening systems and appear on the Google Play Store.

A Reddit user named nikhilchacko published a post in which he warned of a fake application impersonating the Chrome browser.

The post included a screenshot of the fake app's page on the store, as it appeared directly above the original app's page, which may increase the chances of confusion between them and lead some users to download the fake version by mistake.

Other Reddit users called for reporting the app and notifying Google of its existence, before more people fall victim to the scam and install it.

The fake app's page showed that it had exceeded 100,000 downloads, a number that remains small compared to the original app, which has been downloaded more than 10 billion times.

The screenshot also included the name of the developer responsible for the copycat app, Hizbartech.

According to the latest available information, Google has deleted the fake application from the Google Play Store, but the incident raises questions about how it was able to pass the review processes and appear on the official store in the first place.

Before removing the application, a Reddit user, who goes by the name hacknation, decided to install it to find out how it worked.

He said that after downloading and opening the application, he was surprised by the appearance of a large number of unjustified prompts and settings, including asking him to choose a personal avatar for no apparent reason.

The user added that after completing the initial setup, he went to a page that seemed strange to him, explaining that the application was not a copy of the Chromium browser that included tools for tracking or stealing information, but rather it seemed closer to an unfamiliar contacts application that included a large number of avatars created by artificial intelligence.

He also noted that when he tried to have a conversation through the app, he received random responses that did not seem related to what he wrote, which reinforced doubts about the nature of the app and its actual function.

The background of the application reveals another method through which the identity of applications can be changed after publishing them on the store.

The application was initially uploaded to Google Play as a game called Ball Bounce, before the developer changed its name to Chrome and used the original browser icon to mislead users.

The chronology of this incident is also interesting. On August 18, Google announced an advanced mechanism for installing applications from outside the Google Play Store, known as sideloading.

Four days later, on August 22, Ball Bounce appeared on the Store, before changing its name to Chrome on September 30.

This incident highlights the challenges facing Google in preventing fake or malicious applications from reaching users, even as it adopts multiple systems to examine and review applications.

While the company was eventually able to remove the counterfeit application, its appearance on the store and its reaching more than 100,000 downloads raises new questions about the effectiveness of protection measures, and emphasizes the importance of verifying the identity of the developer and application data before installing it, even when it appears on an official store.