A newly discovered Trojan is raising alarm among Android users worldwide. Dubbed PlayPraetor, the malware has already infected more than 11,000 devices, with Morocco emerging as the only African nation caught in its crosshairs. Cybersecurity analysts warn that the campaign relies on fake Google Play Store pages to trick victims into downloading malicious apps.
The warning comes from CYFIRMA, a cybersecurity firm that recently identified the threat. PlayPraetor hides behind fraudulent apps posing as legitimate ones. Once installed, it operates quietly in the background, bypassing Android’s usual security safeguards.
Designed to harvest sensitive data, the Trojan can log keystrokes, seize remote control of a device, and send unauthorized messages—all without the user’s knowledge.
Morocco ranks among the most targeted countries, alongside Spain, Indonesia, and Singapore. Experts believe the operation aims to steal confidential information, spy on communications, and hijack bank accounts or social media profiles.
Security specialists urge extreme caution. They recommend downloading only verified apps from Google’s official store, avoiding suspicious links sent via text or social media, and closely reviewing app permissions—especially those related to accessibility services, which can grant sweeping control over a device.
