Security experts have identified that the Android app Mobdro Pro IP TV Plus VPN has been compromised by the Klopatra malware, posing significant risks to users who sideload it outside of the Google Play Store. This app, masquerading as a free IPTV and VPN service, can access users' financial accounts and seize control of infected devices.
Malware Detected and Spread
The Klopatra malware was first detected in late August 2025. By late September, thousands of devices, mainly in Italy and Spain, were reportedly affected. The app appears under various names, including Modpro IP TV Plus VPN. Users are advised to check their devices and immediately delete the app if found.
Google's Automatic Protection
Google emphasizes that Android users are protected by Google Play Protect, which is activated by default on devices with Google Play Services. This security measure can detect and block malicious apps, even if installed from outside the Play Store.
Security Recommendations
- Regularly scan devices for malicious apps, especially if sideloading apps.
- Avoid installing free VPN or IPTV apps from unofficial sources due to potential hidden risks.
- Keep Google Play Protect active to safeguard against known threats like Klopatra.
