35,000 smart phones in Viet Nam infected by GhostTeam virus

1 min readUpdated May 26, 2025Jan 30, 20184:30 AM

In this article (4)

More than 35,000 smartphones in Việt Nam have been affected by the GhostTeam virus, according to the BKAV Technology Group.

The virus takes advantage of popular Vietnamese applications in Google Play to spread and steal Facebook passwords.

Hackers provide applications like flashlights and calendars, which, after installing, automatically download the virus.

The applications sound a security warning and offers suggestions on what to do, tricking users to click on a harmful link.

BKAV experts warn that smart phone users should scan their phones and change their Facebook password immediately if they discover the virus.

Vũ Ngọc Sơn, BKAV Technology Group’s deputy chairman in charge of anti-malware, said: “It is very hard for users to be vigilant against viruses infiltrating through Google Play. In this case, users should use anti-virus software to get automatic protection.”

Google Play has already deleted harmful Vietnamese applications, but smart phones in which they are already installed face a very high possibility of infection.

AdvertisementAdvertise with usMobile 320×100

What this means

The GhostTeam virus infecting 35,000 Vietnamese smartphones shows a significant and ongoing threat to mobile commerce integrity. This incident directly pressures app platforms like Google Play, which, despite deleting harmful apps, face reputational damage and necessitate more rigorous vetting processes. Unlike physical retail expansions by Chagee Holdings in Southeast Asia or Tiffany & Co. In Singapore, this digital threat undermines the foundational trust required for online transactions. Retailers relying on mobile channels must proactively strengthen their security protocols. The risk is a widespread erosion of consumer confidence in mobile payments and personal data security. We anticipate seeing stronger security mandates or partnerships from major app stores to combat such stealthy malware.

Minjun Park · Retail News Asia newsroom

Questions & Answers

How did the GhostTeam virus manage to infect so many phones?

The virus spread by being embedded in popular Vietnamese applications on Google Play. After installation, these apps would automatically download the virus. They then tricked users into clicking harmful links by sounding security warnings and offering false solutions.

What should users do if they suspect their phone is infected with the GhostTeam virus?

Users should immediately scan their phones for the virus and change their Facebook password. BKAV experts also advise using anti-virus software for automatic protection against such threats, especially since Google Play infiltration is difficult to guard against.

Has Google taken any action against the applications spreading the GhostTeam virus?

Yes, Google Play has already removed the harmful Vietnamese applications that were spreading the virus. However, phones where these applications were already installed still face a very high risk of infection and require user action to resolve.

Reader pulse

What's the biggest threat from this virus?

21,714 votes so far