Android users, you may want to check your Google Play Store account for any suspicious transactions.
Earlier today, Bleeping Computer reported of a newly discovered subscription scamware on Android devices that has apparently been running for two years. The scamware was discovered by Zimperium Labs, who found it on 470 Google Play Store apps.
Surprisingly, the scamware has victimized over 105 million users who paid actual money on a subscription they never signed up for. It has also been active in more than 70 countries. As estimated, the scam may amount to hundreds of millions of dollars.
Aside from the ones found on the Play Store, there were some that got sideloaded after a third-party installation. What’s surprising is that these apps look pretty normal and do not contain any flags on its description field.
While these apps actually work, the ‘Dark Herring’ malware is charging customers for premium services they never signed up for in the first place. Some users do not even realize that they are paying an average of $15 per month for every scamware app installed. What’s even worse is that the malware has been running since March 2020. Zimperium Labs notes that victims don’t have any recourse for getting a reimbursement for the money already paid.
Once the scamware apps were reported by Zimperium, Google took swift action and removed these apps from the Play Store. This, however, does not mean you’re in the clear. If you already downloaded the app, you may continue to be charged for the subscription. It’s best that you check your credit card or subscriptions to review anything that may look suspicious to you.
Source: PhoneArena
