NBC4 WCMH-TV

Apps infected with ‘Judy’ malware may have impacted up to 36 million Android devices

Michelle Rotuno-Johnson

(WFLA) – A global security vendor is warning Android users of a widespread malware campaign on Google’s app store, Google Play.

Researchers at Check Point Software Technologies say the malware called “Judy,” was discovered on 41 apps developed by a Korean company called Kiniwini. They say some of the apps were on Google Play for years, but were recently updated. Google removed the apps from the Play store after being notified of the threat by Check Point.


The researchers describe “Judy” as an auto-clicking adware that uses infected devices to generate fraudulent clicks on ads. This, in turn, generates revenues for the people who are behind it.

According to Check Point, the apps reached somewhere between 4.5 to 18.5 million downloads. They believe 8.5 to 36.5 million users could be affected.Check Point released this list of malicious apps developed by Kiniwini:

You can read Check Point’s full report on the malware by visiting their website.