The malware disguises as an ads network and able to send counterfeit messages, collect personal information like phone number and device ID, send notifications, and ask user to download more apps. BadNews is also able to do premium push SMS.
Google has removed the 32 applications attacked by BadNews from Play Store. The app developer accounts have been suspended by Google, although some of them don’t know about the presence of that malware cause BadNews is designed similar to regular ads SDK. Half of those apps is in Russian and the rest is in English.