{"id":4767,"date":"2026-01-20T13:49:26","date_gmt":"2026-01-20T11:49:26","guid":{"rendered":"https:\/\/altanet.ro\/?p=4767"},"modified":"2026-04-14T14:18:09","modified_gmt":"2026-04-14T11:18:09","slug":"cellik-malware-android-aplicatii-google-play","status":"publish","type":"post","link":"https:\/\/altanet.ro\/en\/2026\/01\/20\/cellik-malware-android-aplicatii-google-play\/","title":{"rendered":"Cellik: The virus that hides in official apps on your phone"},"content":{"rendered":"

Usually, the golden rule in security is simple: \"Don't download apps from dubious sites, only use the Official Store.\" But what do you do when the danger comes from there? In 2026, hackers found a way to trick even the filters of the tech giants.<\/p>\n

The name of the threat is Cellik<\/strong>. It is a type of virus (Trojan) that disguises itself as harmless applications, such as a flashlight, a calculator or a document scanner, available directly in the Google Play Store. At Altanet Craiova<\/strong>, we analyze these \"invisible\" threats so that you know what to look out for before pressing the \"Install\" button.<\/p>\n

What is Cellik and why is it different?<\/strong><\/span><\/h2>\n

Most viruses are blocked by your phone's security systems because they try to communicate with suspicious hacker servers. Cellik is smarter. It uses a tactic called \"hiding in plain sight.\"<\/p>\n

Instead of using a secret server, this virus uses legitimate platforms, such as Google Drive<\/strong> or Google Play<\/strong>, to receive commands from the attackers. Because your phone trusts Google, it doesn't block this communication. Basically, the hacker controls your phone using the same channels you use for photos or documents.<\/p>\n

What can it do to your phone?<\/strong><\/h3>\n

Cellik is a RAT (Remote Access Trojan). This means that once installed, it turns your phone into a spying tool that:<\/p>\n