Premium Deception Android malware campaign
Campaign
Summary
Hide ▲
Show ▼
The Premium Deception campaign used nearly 250 fake Android apps to enroll victims in premium mobile billing subscriptions, creating direct fraud risk across multiple countries. The operation targeted users in Malaysia, Thailand, Romania and Croatia over a 10-month period. It matters because the malware automated carrier-billing enrollment and scaled abuse through impersonated apps and hidden subscription workflows.
Related Happenings
Trapdoor Android malvertising and ad-fraud campaign
Campaign
First: 19.05.2026 19:38
Last: 19.05.2026 19:38
Sources 1
About this happening:
The **Trapdoor** campaign is a **self-sustaining malvertising and ad-fraud operation** targeting **Android users** and turning app installs into revenue through threat-actor-contr...
Trapdoor Android malvertising and ad-fraud campaign
CampaignAbout this happening: The **Trapdoor** campaign is a **self-sustaining malvertising and ad-fraud operation** targeting **Android users** and turning app installs into revenue through threat-actor-contr...
CallPhantom Google Play fraud campaign targeting Android users in India and Asia-Pacific
Campaign
First: 08.05.2026 18:08
Last: 08.05.2026 18:08
Sources 1
About this happening:
The **CallPhantom** fraud campaign pushed **28 fake call-history Android apps** through the **Google Play Store**, causing **financial loss** for users who paid for fabricated dat...
CallPhantom Google Play fraud campaign targeting Android users in India and Asia-Pacific
CampaignAbout this happening: The **CallPhantom** fraud campaign pushed **28 fake call-history Android apps** through the **Google Play Store**, causing **financial loss** for users who paid for fabricated dat...
NGate Android Brazil fake-app and fake-lottery campaign
Campaign
First: 21.04.2026 12:00
Last: 21.04.2026 12:00
Sources 1
About this happening:
A **NGate** campaign has been active since **November 2025**, targeting primarily **Android devices in Brazil** and using **fake-app** and **fake-lottery** lures to spread a malic...
NGate Android Brazil fake-app and fake-lottery campaign
CampaignAbout this happening: A **NGate** campaign has been active since **November 2025**, targeting primarily **Android devices in Brazil** and using **fake-app** and **fake-lottery** lures to spread a malic...
Global mobile banking malware campaign targeting 1243 financial brands
Campaign
First: 19.03.2026 16:30
Last: 19.03.2026 16:30
Sources 1
About this happening:
The **global mobile banking malware campaign** is expanding against **1243 financial brands** across **90 countries**, shifting fraud onto **user devices** and weakening tradition...
Global mobile banking malware campaign targeting 1243 financial brands
CampaignAbout this happening: The **global mobile banking malware campaign** is expanding against **1243 financial brands** across **90 countries**, shifting fraud onto **user devices** and weakening tradition...
IPTV app lure campaign distributing Massiv Android banking malware
Campaign
First: 19.03.2026 12:13
Last: 19.03.2026 12:13
Sources 1
About this happening:
A **recent IPTV app lure campaign** is distributing **Massiv Android banking malware**, putting users who seek **free or low-cost live sports broadcasts** at risk of device compro...
IPTV app lure campaign distributing Massiv Android banking malware
CampaignAbout this happening: A **recent IPTV app lure campaign** is distributing **Massiv Android banking malware**, putting users who seek **free or low-cost live sports broadcasts** at risk of device compro...
Timeline
-
20.05.2026 18:30 2 articles · 7d ago
Premium Deception Android malware campaign
Initial DisclosureThe operation began in **March 2025** with fake Android apps that impersonated popular brands to push premium billing enrollments. Early samples already used hardcoded operator targeting and cross-country distribution to reach users in multiple markets.
Show sources
- Android Malware Campaign Used Hundreds of Fake Apps to Silently Charge Users — www.infosecurity-magazine.com — 20.05.2026 18:30
- Android Malware Campaign Used Hundreds of Fake Apps to Silently Charge Users — www.infosecurity-magazine.com — 20.05.2026 18:30