Fraudulent Google Play–style download pages are being used to deliver cryptomining malware and banking Trojans to Android users in Brazil, raising the risk of device compromise and financial theft. Security observers warn users to avoid sideloading apps from unverified pages.