Executive Summary
A developer identified as Hizbartech successfully listed a counterfeit Google Chrome application on the Google Play Store, reaching over 100,000 downloads before its removal. The app, which launched in August 2026 as a game called "Ball Bounce," was renamed on September 30 to impersonate the Chrome browser, adopting its official name, icon, and description while retaining its original package ID.
Technically, the actor leveraged the reputational trust of an existing app listing to maintain download counts and improve search rankings. The counterfeit app reportedly appeared as a sponsored result above the legitimate Chrome browser. While specific malicious payloads were not confirmed, users reported that the application lacked browser functionality, instead serving a messaging interface with AI avatars and loops of persistent advertisements.
This incident highlights a critical bypass in mobile app store review processes, where rebrands of existing applications may not trigger the same scrutiny as new submissions. Organizations should be aware that official app stores can still host brand impersonation threats that may lead to data theft or ad-fraud.
Key Details
Threat Name
—
Affects
—
Adversary
—
MITRE Techniques
—
Malware/Tools
None identified