Recently Microsoft Security released a report warning Android users of a new malware it has discovered. According to the report, the malware is upgrading the subscription service of users to a premium tier without their permission.
The report says the toll fraud malware belongs to the subcategory of billing fraud. This is described as “in which malicious applications subscribe users to premium services without their knowledge or consent.” The researchers also described billing fraud as “one of the most prevalent types of Android malware.”
So how does toll fraud work? Mashable shares that it “works over the Wireless Application Protocol (WAP).” WAP allows customers to subscribe to paid content and even charge the subscription to their phone bill.
In order for the malware to work, your device should be connected to cellular network instead of Wi-Fi. The malware will disconnect you from your connection and onto your cellular network. But while you’re still trying to connect to your cellular network, the malware already starts subscribing to premium services. Any one-time passwords (OTP) sent to your phone for verification will also be hidden by the malware so you don’t realize what’s going on.
As a result, you get subscribed to a higher priced tier without your knowledge or consent. And this means you will incur high mobile bill charges.
The report shares that the malware is able to infiltrate a target’s device via the Google Play Store where it is disguised as an unassuming app. Common trojan apps have been found in apps that offer beauty, editor, personalization, communication, photography, and tools.
The best way you can protect yourself against this type of malware is to be careful of the apps that you download. Always check out the reviews of the apps you plan to use and be on the lookout for fake developer profiles or the ones with poor grammar.
Source: Mashable
