These Android Apps with a Million Play Store Installations Redirect Users to Malicious Sites

Malwarebytes' analysis found the apps have an approximately four-day waiting period before opening the first phishing site in Chrome browser. The apps are part of a broader malware operation called HiddenAds, which has been active since at least June 2019 and has a track record of illicitly earning revenues.