Android users at risk of new wallet-draining attacks
Owners of Android smartphones are at risk of a new type of billing fraud designed to trick them into paying for premium subscription packages, Microsoft has warned.
In an extensive blog post (opens in new tab), detailing how the entire scheme operates, Microsoft explained that toll fraud malware is “one of the most prevalent types” on Android and that it just keeps evolving. Toll fraud is also quite complex, compared to its close relatives, SMS fraud and call fraud.
These apps use specific network operators, running their operations only if the compromised endpoint (opens in new tab) is subscribed to one of its target operators.
If these conditions are met, the app will subscribe to a service, completely out of sight for the device owner, and will even intercept one-time password SMS messages and other notifications.
Toll fraud malware is also known for dynamic code loading, as this makes it harder for mobile security software to detect any foul play through static analysis.
Prevention and mitigation
However, Microsoft says there are characteristics that can be used to filter and detect these threats, and there are also adjustments in Android API restrictions and Google Play Store publishing policy, that can help mitigate the threat, the company added.
The first major malware variant in the toll fraud family was Joker, which managed to wiggle its way into the Google Play Store some five years ago. Its main goal is to generate as big of a financial impact on the victim as possible.
As it carries sophisticated cloaking techniques, the best way to protect your devices from such malware is to make sure it doesn’t get installed in the first place.
As a general rule of thumb, Microsoft reminds, Android apps should not be sideloaded (installed from untrusted sources) and should always be kept up to date. Furthermore, apps should not be given SMS permissions, access to the notification listener or accessibility access unless there is a clear reason they are necessary.
Audio player loading… Owners of Android smartphones are at risk of a new type of billing fraud designed to trick them into paying for premium subscription packages, Microsoft has warned. In an extensive blog post (opens in new tab), detailing how the entire scheme operates, Microsoft explained that toll fraud…
Recent Posts
- Everything new on Prime Video in May 2024
- ICYMI: the week’s 7 biggest tech stories, from Netflix enraging users to the Rabbit R1 disappointing all of us
- Samsung’s archrival strikes crucial partnership with Nvidia’s closest ally to deliver key next-gen memory — SK Hynix teams up with TSMC to advance HBM development but could this move encourage TSMC to become like Intel?
- As Google’s antitrust trial wraps, DOJ seeks sanctions over missing messages
- Microsoft needs some time to ‘refine’ updates for Copilot AI in Windows
Archives
- May 2024
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- November 2020
- October 2020
- September 2020
- August 2020
- July 2020
- June 2020
- May 2020
- April 2020
- March 2020
- February 2020
- January 2020
- December 2019
- November 2019
- December 2011