A widespread premium SMS scam on the Google Play Store

guest · Oct 25, 2021

Millions of Android users targeted in subscription fraud campaign
October 25, 2021
https://www.bleepingcomputer.com/ne...sers-targeted-in-subscription-fraud-campaign/

A massive fraud campaign utilizing 151 Android apps with 10.5 million downloads was used to subscribe users to premium subscription services without their knowledge.

Researchers at Avast discovered the campaign, naming it 'UltimaSMS,' and reported 80 associated apps that they found on the Google Play Store.
While Google quickly removed the apps, the fraudsters likely ammassed millions of dollars in fraudulent subscription charges.
Click to expand...

It starts with a phone number
When launching one of these apps for the first time, use data from the smartphone, like the location and IMEI, to change its language to match the country.
The app would then prompt the user to enter their mobile phone number and email address to access the program's features.

Having the phone number and the required permissions, the app then subscribes the victim to a $40 per month SMS service from which the scammers get a cut as an affiliate partner.
Click to expand...

Avast's analysis reveals that the authors of these apps have implemented a system that charges the victim the maximum possible amount based on their location.
Although most of these apps don't offer the advertised functionality, and despite the numerous bad reviews they had on the Play Store, their creators are still finding success through the sheer volume of submissions.

By using such a large number of apps for the 'UltimaSMS' campaign, the scammers maintained a constant influx of victims and preserved their presence on the Play Store despite the constant reporting and take-down action by Google.
Click to expand...

Avast: UltimaSMS: A widespread premium SMS scam on the Google Play Store

A fake photo editor, camera filter, games and other apps promoted via Instagram and TikTok channels
The apps that I discovered are part of the UltimaSMS campaign, consisting of 151 apps that at one point or another had been available for download on the Google Play Store. These apps have been downloaded more than 10.5 million times, and are nearly identical in structure and functionality; essentially copies of the same fake app used to spread the premium SMS scam campaign.

The fake apps I found feature a wide range of categories such as custom keyboards, QR code scanners, video and photo editors, spam call blockers, camera filters, and games, among others.
Click to expand...

aztony · Oct 25, 2021

Good job Avast!

Log in or Sign up

A widespread premium SMS scam on the Google Play Store

guest Guest

aztony Registered Member

Log in or Sign up

A widespread premium SMS scam on the Google Play Store

guest Guest

aztony Registered Member

Useful Searches