1. A method comprising: selecting for analysis, by a computing device, an application; monitoring, by the computing device, at least one of network behavior and system behavior of the application during execution of the application within a controlled environment; identifying, based at least in part on at least one of the network behavior and the system behavior of the application, a group of application programming interfaces utilized by the application during execution; determining, by the computing device and based on the group of application programming interfaces, that the application is undesired; identifying a group of related applications that are each related to the application based on the group of application programming interfaces utilized by the application, wherein each related application of the group of related applications utilizes one or more application programming interfaces of the group of application programming interfaces utilized by the application, and wherein each related application of the group of related applications are available for download from an online application store that provides an interface for a plurality of mobile computing devices to download applications executable by the plurality of mobile computing devices; and removing, from the online application store, the group of related applications.