These fake Android apps steal your money when you aren’t looking

guest · Jun 28, 2018

These fake Android apps steal your money when you aren’t looking
Google Play Apps found secretly subscribing to Premium Services
June 27, 2018
https://www.digitaltrends.com/compu...und-secretly-subscribing-to-premium-services/

If you thought you were immune from hackers when downloading “legit” Android apps from Google Play, then think again. The McAfee Mobile Research team recently discovered a new campaign where at least 15 apps were “re-packaged” to secretly sign up for premium paid services in the background. The list includes Qrcode Scanner, Cut Ringtones 2018, and Despacito Ringtone.

The group then moved on to bigger bucks through Google Play during November 2017 in its second campaign targeting Thailand, Malaysia and Russia. They modified the fake installer, now called Sonvpay.B, to serve as full-fledged familiar-but-fake apps listed on Google’s storefront. [...] The campaign also used the same SMS method while adding WAP billing — aka direct billing to a mobile carrier — to secretly subscribe victims to premium services.

After you install one of these apps, the Sonvpay component receives commands to sign onto premium paid services through push notifications that the device owner never sees. These services are billed directly to the mobile carrier. [...]
Click to expand...

Log in or Sign up

These fake Android apps steal your money when you aren’t looking

guest Guest

Log in or Sign up

These fake Android apps steal your money when you aren’t looking

guest Guest

Useful Searches