Fake Chrome App on Google Play Linked to Hizbartech

A Hizbartech Google Play listing copied Chrome branding; download totals and worldwide removal remain disputed.

Researchers reported a Google Play listing from developer Hizbartech that copied Chrome’s name, icon, and description instead of identifying Google LLC. Package com.ballbounce.Hizbartech had earlier appeared as the game Ball Bounce, with one report placing the original listing in August 2026 and the rebrand around 30 September or late September. Users who installed it reportedly saw chat, contacts, or AI avatars rather than a browser; one account also described a 42 MB app and sponsored placement above the genuine Chrome listing. Sources disagree on reach and status: downloads are given as more than 100,000 in one report and as conflicting between 100,000+ and 10,000+ in the other, while one says Google later removed the listing and the other says an October 14 not-found result did not prove worldwide removal. Neither report establishes password or credential theft, remote control, spyware, or a banking payload, and neither links the app to separate SpyNote, Anatsa, or malicious browser-extension cases.

• Developer Hizbartech listed a Google Play app that copied Chrome’s name, icon, and description rather than naming Google LLC.
• Package com.ballbounce.Hizbartech was previously branded as the game Ball Bounce; one report dates that listing to August 2026 and the Chrome rebrand to around 30 September 2026.
• Installers reported a chat, contacts, or AI-avatar interface rather than a browser, and one source said the app was 42 MB.
• In at least one search, the listing had sponsored placement above the real Chrome app.
• Download figures disagree: one report states more than 100,000, while the other says counts conflict between 100,000+ and 10,000+.
• Removal is disputed: one report says Google later removed the listing, while the other says an October 14 not-found result did not confirm worldwide removal.
• Neither report confirms password or credential theft, remote control, spyware, or a banking-trojan payload.
• The app was not linked to separate SpyNote, Anatsa, or malicious browser-extension cases.