Premium Deception Android malware campaign
Campaign
Summary
Hide ▲
Show ▼
The Premium Deception campaign used nearly 250 fake Android apps to enroll victims in premium mobile billing subscriptions, creating direct fraud risk across multiple countries. The operation targeted users in Malaysia, Thailand, Romania and Croatia over a 10-month period. It matters because the malware automated carrier-billing enrollment and scaled abuse through impersonated apps and hidden subscription workflows.
Related Happenings
Trapdoor Android malvertising and ad-fraud campaign
Campaign
H score39
First: 19.05.2026 19:38
Last: 19.05.2026 19:38
Sources 1
About this happening:
The Trapdoor campaign is a self-sustaining malvertising and ad-fraud operation targeting Android users and turning app installs into revenue through threat-actor-contr...
Trapdoor Android malvertising and ad-fraud campaign
CampaignAbout this happening: The Trapdoor campaign is a self-sustaining malvertising and ad-fraud operation targeting Android users and turning app installs into revenue through threat-actor-contr...
CallPhantom Google Play fraud campaign targeting Android users in India and Asia-Pacific
Campaign
H score34
First: 08.05.2026 18:08
Last: 08.05.2026 18:08
Sources 1
About this happening:
The CallPhantom fraud campaign pushed 28 fake call-history Android apps through the Google Play Store, causing financial loss for users who paid for fabricated dat...
CallPhantom Google Play fraud campaign targeting Android users in India and Asia-Pacific
CampaignAbout this happening: The CallPhantom fraud campaign pushed 28 fake call-history Android apps through the Google Play Store, causing financial loss for users who paid for fabricated dat...
NGate Android Brazil fake-app and fake-lottery campaign
Campaign
H score37
First: 21.04.2026 12:00
Last: 21.04.2026 12:00
Sources 1
About this happening:
A NGate campaign has been active since November 2025, targeting primarily Android devices in Brazil and using fake-app and fake-lottery lures to spread a malic...
NGate Android Brazil fake-app and fake-lottery campaign
CampaignAbout this happening: A NGate campaign has been active since November 2025, targeting primarily Android devices in Brazil and using fake-app and fake-lottery lures to spread a malic...
Global mobile banking malware campaign targeting 1243 financial brands
Campaign
H score47
First: 19.03.2026 16:30
Last: 19.03.2026 16:30
Sources 1
About this happening:
The global mobile banking malware campaign is expanding against 1243 financial brands across 90 countries, shifting fraud onto user devices and weakening tradition...
Global mobile banking malware campaign targeting 1243 financial brands
CampaignAbout this happening: The global mobile banking malware campaign is expanding against 1243 financial brands across 90 countries, shifting fraud onto user devices and weakening tradition...
IPTV app lure campaign distributing Massiv Android banking malware
Campaign
H score25
First: 19.03.2026 12:13
Last: 19.03.2026 12:13
Sources 1
About this happening:
A recent IPTV app lure campaign is distributing Massiv Android banking malware, putting users who seek free or low-cost live sports broadcasts at risk of device compro...
IPTV app lure campaign distributing Massiv Android banking malware
CampaignAbout this happening: A recent IPTV app lure campaign is distributing Massiv Android banking malware, putting users who seek free or low-cost live sports broadcasts at risk of device compro...
Timeline
-
20.05.2026 18:30 2 articles · 1mo ago
Premium Deception Android malware campaign
Initial DisclosureThe operation began in March 2025 with fake Android apps that impersonated popular brands to push premium billing enrollments. Early samples already used hardcoded operator targeting and cross-country distribution to reach users in multiple markets.
Show sources
- Android Malware Campaign Used Hundreds of Fake Apps to Silently Charge Users — www.infosecurity-magazine.com — 20.05.2026 18:30
- Android Malware Campaign Used Hundreds of Fake Apps to Silently Charge Users — www.infosecurity-magazine.com — 20.05.2026 18:30