Thousands hit by Android billing scam via fake messenger apps

A recent report from security firm zLabs highlights a significant mobile cyberattack involving Android carrier billing fraud, affecting thousands of users globally. The fraud primarily exploits malicious applications that trick users into incurring unauthorized charges on their bills. The malware campaign employs a network of around 250 deceptive apps, mimicking popular services like Facebook Messenger and TikTok, to lure victims.

Three main malware variants were identified: 1) an automated subscription engine that bypasses authentication; 2) a cookie theft mechanism that hijacks browser sessions; and 3) integration with Telegram for real-time tracking of infected devices. The report also emphasizes the need for increased vigilance among users to monitor billing statements and avoid unverified app downloads.