These Samsung Galaxy Store apps could infect your new devices with malware

Honor 50
(Image credit: Future)

Potentially malicious smartphone tools are being distributed through Samsung’s mobile app store, researchers have warned.

At least five apps, clones of the deceased Showbox app, have popped up in the Galaxy Store, Max Weinbach of Android Police reported via Twitter.

The apps themselves don’t directly contain malicious code, but they could be used as a stepping stone. In fact, their design implies that they do serve the purpose of a gateway towards more serious mobile malware.

Galaxy store risk

Speaking to Android Police, security researcher linuxct explained that two of the apps can do dynamic code execution, which means they can download and execute other, potentially malicious code. 

Knowing the fact that “there are very few legitimate use cases for this functionality”, as well as the fact that it could be weaponized “easily”, it’s safe to assume that was the point, in the first place. 

"So at any moment it may become a trojan/malware, hence it's unsafe and thus why so many vendors flagged it in VT/Play Protect," linuxct explains.

The good news is that Google’s Play Protect, essentially a mobile antivirus that scans incoming apps for signs of trouble, triggers a warning when the user tries to install any of the apps. The bad news is, given that the apps reside on Samsung’s official store, people could be ignoring the warning. In fact, the apps cumulatively have hundreds of reviews, which could mean that they have plenty of downloads. Unfortunately, Samsung doesn’t count downloads from its app store, so it’s impossible to say at this point.

Some of the reviews do stress that the apps trigger the warning.

Android Police added that all of the apps are clones of Showbox, an old app that was accused of enabling piracy, but has been dead for at least two years, and is unavailable on all main app stories..

TOPICS

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
A close-up photo of an iPhone, with the App Store icon prominent in the center of the image.
App stores are increasingly becoming a major security worry
 In this photo illustration a Google Play logo seen displayed on a smartphone.
Why is there so much spyware hidden in the Play Store?
Android phone malware
Screen reading malware found in iOS app stores for first time - and it might steal your cryptocurrency
An Android phone being held in the hand
These malicious Android apps were installed over 60 million times - here's how to stay safe
Android Logo
Devious new Android malware uses a Microsoft tool to avoid being spotted
Android phone malware
This nasty Android malware is posing as the Telegram Premium app
Latest in Security
Data leak
Top home hardware firm data leak could see millions of customers affected
Representational image depecting cybersecurity protection
Third-party security issues could be the biggest threat facing your business
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Android Logo
Devious new Android malware uses a Microsoft tool to avoid being spotted
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
Latest in News
Hisense U8 series TV on wall in living room
Hisense announces 2025 mini-LED TV lineup, with screen sizes up to 100 inches – and a surprising smart TV switch
Nintendo Music teaser art
Nintendo Music expands its library with songs from Kirby and the Forgotten Land and Tetris
Opera AI Tabs
Opera's new AI feature brings order to your browser tab chaos
An image of Pro-Ject's Flatten it closed and opened
Pro-Ject’s new vinyl flattener will fix any warped LPs you inadvertently buy on Record Store Day
The iPhone 16 Pro on a grey background
iPhone 17 Pro tipped to get 8K video recording – but I want these 3 video features instead
EA Sports F1 25 promotional image featuring drivers Oscar Piastri, Carlos Sainz and Oliver Bearman.
F1 25 has been officially announced, with this year's entry marking a return for Braking Point and a 'significant overhaul' for My Team mode