Psylinks Join the beta

What is a trojan? Fake apps that hide malware

A trojan is malicious software that pretends to be something useful, such as a game, a utility or a government app, so that you install it yourself.

By Psylinks Security ยท Updated November 2026

Why they work

Trojans rely on trust, not on breaking into your phone. The app does what it promises, or looks like it does, while doing something harmful in the background.

What a trojan can do on Android

  • Read SMS to capture one-time passwords.
  • Draw fake login screens over real banking apps (an "overlay").
  • Use Accessibility access to tap buttons or read the screen.
  • Download more malware after it is installed.

How to avoid them

  • Install only from Google Play or the app maker's official site.
  • Be suspicious of apps that ask for SMS, Accessibility or Device admin access without a clear reason.
  • Do not install an APK that someone sent you in a chat, even if it looks official.
  • Check the developer name and review history before installing.

How Psylinks AV helps

Psylinks AV checks apps using SHA-256 signature matching against known malware and a behavioural risk engine that flags risky permission combinations. It also scans new apps as soon as they are installed.

Frequently asked questions

Is a trojan a virus?

Not exactly. A virus copies itself into other files. A trojan relies on tricking you into installing it.

How is a trojan different from adware?

Adware mainly shows ads. A trojan can steal data or give an attacker control.

Psylinks AV is in beta. A private, lightweight antivirus for Android with no ads. First year free. Join the beta.

Related guides