The latest Joker official update refers to Google's ongoing enforcement against the Joker Android malware family, which hides inside Play Store apps and silently signs victims up for premium SMS subscriptions. There is no consumer patch or app version to install. The fix is device-side: confirm Play Protect is on, scan for flagged apps, cancel the subscriptions, and remove the carrier billing permissions Joker abuses. Google removes confirmed Joker apps when its scanners detect them, so the practical update schedule is whenever Play Protect delivers a new definition set to your phone.
Prerequisites
- An Android phone or tablet signed in to a Google account.
- Access to the Google Play Store app and its Play Protect settings.
- Access to your mobile carrier account or billing portal, if you see unknown charges.
- Your Google account password, in case you need to review linked subscriptions.
Check Whether Your Device Is Affected
- Open the Play Store app and tap your profile picture in the top right corner.
- Tap Play Protect, then tap Scan.
- Read the results list. Any app flagged as harmful has already been catalogued by Google, which is the closest thing to an official Joker update on your device.
- If the scan comes back clean but you still see strange charges, continue to the billing checks below.
Review Your Carrier Billing
- Open your carrier's app or website and sign in.
- Open the billing or usage section and look for premium SMS or third-party subscription lines.
- Screenshot every charge you do not recognize. You will need dates and amounts for a dispute.
- Call your carrier and ask them to block premium SMS short codes on the line.
- Request a refund for the fraudulent charges and ask for the subscription to be cancelled.
Remove Suspicious Apps and Permissions
- Open Settings, then Apps, then see all apps.
- Sort by install date and look for anything you do not remember installing, especially photo editors, wallpaper packs, and flashlight tools.
- Tap the app, open Permissions, and check whether it holds SMS or phone permissions it does not need.
- Tap Uninstall. If the button is greyed out, revoke the app's device administrator rights in Settings under Security first.
- Restart the phone and run the Play Protect scan a second time.
Recheck Your Google Account
Joker has historically mimicked in-app purchases and subscription prompts, so a charge can also appear on a Google account rather than a carrier bill. Open the Google Play Store, tap your profile picture, then Payments and subscriptions, and cancel anything you did not authorize. Changing your Google password and signing out other sessions adds a layer of safety if you suspect the account was touched.
New Joker Update: What the Latest Android Trojan Does
When to Escalate
If charges continue after you remove the app and block short codes, the payload may have survived as a second-stage download. Back up photos and contacts, then perform a factory reset and restore only the apps you recognize. Report the app to Google through the Play Store listing page so it enters the removal queue. Keep your Android security patch level current, since many Joker campaigns relied on older WebView and SMS handling flaws that later patches closed.