Malicious Chrome Imposter Racked Up 100,000 Downloads on Play Store

A deceptive Android application masquerading as Google Chrome successfully tricked 100,000 users into downloading it from the Play Store. The app initially appeared as a benign game, Ball Bounce, before the developer bypassed security checks by swapping the interface for a convincing, albeit fraudulent, browser clone.

Corp and Tech·October 16, 2026·reads: 1,042

The threat was first identified by a Reddit user who noticed the malicious software appearing as a sponsored recommendation directly above the legitimate Google Chrome listing. By manipulating the store's search and promotion mechanisms, the imposter gained significant visibility before being pulled by Google. Android Authority confirmed the app’s history, noting that the developer utilized a classic bait-and-switch tactic—launching a simple game to pass initial vetting processes before surreptitiously deploying the browser-themed skin. This incident highlights ongoing vulnerabilities in automated app approval systems, where developers can repurpose established, approved listings to distribute harmful content to unsuspecting audiences.