Popular QR code scanner app infected with malware

If you're one of the millions with this QR scanner app downloaded, it's time to hit delete.

Georgia Dixon
Feb 09, 2021
Icon Time To Read1 min read

QR code scanner apps experienced a massive surge in downloads last year thanks to the COVID-19 pandemic, and while most iPhone users (and some Android devotees) have managed to get by simply using their native camera app, millions of Android users turned to third-party apps to check in to restaurants, shops, hairdressers and other premises.

Barcode Scanner was one of the more QR code popular scanner apps on the Google Play Store with over 10 million downloads. However, those who have installed the app are being strongly encouraged to delete it after it was unceremoniously pulled from the store due to recent malware reports.

Source: Malwarebytes

Affected users began noticing changes to their phone's behaviour after an update released on December 4, 2020. While ads are perfectly legal (and common) on free apps, it was discovered that the app's developers had knowingly added malicious code which caused a series of unrelenting ads to pop-up on the user's device.

Invalid Entry in Embeddable Script

It's unknown how long the code had been there, perhaps, as Malwarebytes put it, 'lying dormant' for years. It's possible the developers were waiting for the app to peak in popularity before unleashing their Trojan-style ad onslaught to users. While Google acted quickly, pulling Barcode Scanner from the Play Store as soon as the tech giant became aware of the malicious update, those who have downloaded it will need to manually uninstall it in order to rid their device of the malware.

It's a timely reminder for all smartphone users to remain vigilant when downloading and updating apps and games (particularly those which are ad-supported) from app stores. As the Barcode Scanner saga proved, even seemingly innocuous programs with tens of millions of downloads aren't necessarily safe. Another important step to keeping yourself (and your data) protected and malware-free is to ensure your smartphone's operating system is updated to the latest version.

Georgia Dixon
Written by
Georgia Dixon has 10 years of experience writing about all things tech, entertainment and lifestyle. She spends most of her time as Managing Editor of SafeWise Australia and also has bylines on 7NEWS, Stuff.co.nz, in TechLife magazine and more. In 2023 she won Best News Writer at the Consensus IT Awards, and in 2024 she was a finalist for Best News Journalist at the Samsung IT Journalism Awards (The Lizzies). In her spare time, you'll find her playing games and daydreaming about good food, wine, and dogs.