This reply
Asdfgh mark this message contains true information
originally written by Asdfgh
該程式的更新並非直接來自Google Play,而是要求使用者下載與安裝另一個存放於GitHub上的QR Code Scanner: Add-On程式。

References

https://www.ithome.com.tw/news/149663

TeaBot金融木馬溜進Google Play,這次它假冒為條碼掃描器

駭客將良性程式QR Code & Barcode Scanner上架到Google Play後,再要求完成下載的用戶立即更新程式並提供無障礙服務權限,以於裝置上植入金融木馬TeaBot竊取超過400種程式的登入憑證

https://www.ithome.com.tw/news/149663

The content above by Cofacts message reporting chatbot and crowd-sourced fact-checking community is licensed under Creative Commons Attribution-ShareAlike 4.0 (CC BY-SA 4.0), the community name and the provenance link for each item shall be fully cited for further reproduction or redistribution.