Skip to main content

Hundreds of scam apps caused a surprise $42 monthly charge to land on millions of Android users' wireless bills

Android smartphone
  • Millions of Android users were plagued by scam apps that placed charges on their wireless bills.
  • Users were tricked by a fake prize into providing their phone numbers, Zimperium reported.
  • Google says that all of the apps identified by Zimperium have been removed from the Play Store.
  • See more stories on Insider's business page.

A massive scamming campaign recently plagued the Google Play Store, affecting millions of Android users.

The scam took place via more than 200 apps run by attackers to scam money from its downloaders, security firm Zimperium reported.

Zimperium, a member of the Google App Defense Alliance which scans applications before publishing in the Google Play Store, estimates that 10 million Android users globally were affected by this scam.

The applications posed as seemingly normal downloads, hiding under facades like "Photo Effect Pro," "Daily Horoscope & Life Palmestry," and "Free Coupons 2021." The apps would notify downloaders that they won a prize and would redirect them to enter their phone number on a specific webpage.

However, by entering their information, users were actually submitting their phone number to an SMS service that would start charging their phone bill about $42 per month.

"Forensic evidence of this active Android Trojan attack, which we have named GriftHorse, suggests that the threat group has been running this campaign since November 2020," Zimperium stated in their findings. "These malicious applications were initially distributed through both Google Play and third-party application stores."

Scams like GriftHorse take advantage of small screens, local trust, and misinformation to trick users into falling for their scams and downloading their apps, Zimperium explained. They also prey on "frustration or curiosity" when they try to accept their fake prize. According to Zimperium, the "level of sophistication, use of novel techniques, and determination" of the threat actors had allowed them to remain undetected.

Google says that all of the apps identified by Zimperium have been removed and the developers of the apps have been banned, but the scam will have lasting effects, WIRED reported. Android users who have not stopped the charges have faced unwanted additions to their wireless bill of over $230.

To prevent scams, the Federal Communications Commission recommends consumers "think twice" before clicking any links and to report any unusual activity. If you sent money to a scammer, the Federal Trade Commission recommends your report the payment right away to reverse the transaction before filing a report with the FTC who can build a case against the scammers.

Read the original article on Business Insider


from Business Insider https://ift.tt/3onEqbM
via IFTTT

Comments

Popular posts from this blog

Instagram accidentally reinstated Pornhub’s banned account

After years of on-and-off temporary suspensions, Instagram permanently banned Pornhub’s account in September. Then, for a short period of time this weekend, the account was reinstated. By Tuesday, it was permanently banned again. “This was done in error,” an Instagram spokesperson told TechCrunch. “As we’ve said previously, we permanently disabled this Instagram account for repeatedly violating our policies.” Instagram’s content guidelines prohibit  nudity and sexual solicitation . A Pornhub spokesperson told TechCrunch, though, that they believe the adult streaming platform’s account did not violate any guidelines. Instagram has not commented on the exact reasoning for the ban, or which policies the account violated. It’s worrying from a moderation perspective if a permanently banned Instagram account can accidentally get switched back on. Pornhub told TechCrunch that its account even received a notice from Instagram, stating that its ban had been a mistake (that message itse...

California Gov. Newsom vetoes bill SB 1047 that aims to prevent AI disasters

California Gov. Gavin Newsom has vetoed bill SB 1047, which aims to prevent bad actors from using AI to cause "critical harm" to humans. The California state assembly passed the legislation by a margin of 41-9 on August 28, but several organizations including the Chamber of Commerce had urged Newsom to veto the bill . In his veto message on Sept. 29, Newsom said the bill is "well-intentioned" but "does not take into account whether an Al system is deployed in high-risk environments, involves critical decision-making or the use of sensitive data. Instead, the bill applies stringent standards to even the most basic functions - so long as a large system deploys it."  SB 1047 would have made the developers of AI models liable for adopting safety protocols that would stop catastrophic uses of their technology. That includes preventive measures such as testing and outside risk assessment, as well as an "emergency stop" that would completely shut down...

If only your bike had a trunk. Oh wait, now it does.

Just to let you know, if you buy something featured here, Mashable might earn an affiliate commission. Biking is one of the best ways to get around, especially if you live in a city. It's quick, it's eco-friendly, and you get a bit of exercise.  If you already commute on two wheels or are thinking of starting, there's a storage device you kinda need. SEE ALSO: This bamboo keyboard combo adds a touch of tranquility to your workspace The Buca Boot is a pretty magical two-in-one hybrid: It’s a super secure storage box for your bike that works like the trunk of a car. You can lock your helmet or whatever else in it and leave it safely behind. It’s also a basket—open it up, and you can carry a bouquet of flowers and a baguette like the picturesque cyclist of your dreams.    Read more... More about Storage , Car , Bicycle , Trunk , and Cyclist from Mashable http://ift.tt/2eHNwLB via IFTTT