Nearly 10 million Android phones have been infected with HummingBad malware.
Security companies Checkpoint and Lookout have separately published blog posts about the malware, also known as Shedun, which is said to be making around $300,000 (£232,000) a month for its creators.
“We’ve long been aware of this evolving family of malware and we’re constantly improving our systems that detect it. We actively block installations of infected apps to keep users and their information safe,” said Google in a statement (via BBC News).
The malware generates fake clicks for adverts and is also secretly installing apps and spying on the browsing habits of victims, mainly using phones in China, India, the Philippines and Indonesia.