Android users warned as 1.3 million phones are infected with account-stealing virus

A mass hacker attack against Android phones has given hackers access to 1.3 million Google accounts – with email, photos and documents.

New victims were being infected at a rate of 13,000 a day, cybersecurity company Check Point warned.

The attack – known as Ghooligan – is spread via illegitimate apps downloaded from outside official stores such as Google Play.

Hackers stole digital ‘tokens’ which could be used to break into people’s email – although so far, infected phones have just been used to download other apps and give them good reviews on other app stores.

The ratings ‘boost’ allowed cybercriminals to sell apps – making large sums of money.

Check Point’s Michael Shulov said, ‘They were able to get to the lowest level of the Android operating system where there are no limitations on what the malware can do, and then they went after these account files. It’s probably the biggest ever security breach of Google accounts.’