Delete these apps right now: The 2026 list of malicious Android and iPhone apps

A new 2026 list from security researchers flags malicious Android and iPhone apps that have been removed from Google Play or Apple’s App Store—but may still be active on devices where they were already installed. The article notes 28 apps sold the same scam under different names, including schemes promising to reveal “call history,” and several variants that lure users into installing malware. Some apps hid bank-login theft in a PDF reader package; others planted a rootkit that can survive a factory reset. It provides quick steps to delete recognized entries and run an Android Play Protect scan, while iPhone users delete unknown apps via iPhone Storage settings.