Threat actors are using malicious Android apps to scam users into signing up for a bogus premium SMS subscription service, which results in big charges accruing on their phone bills.

Jakub Vavra from the threat operations team of security firm Avast uncovered the campaign, which he dubbed UltimaSMS because one of the first apps he discovered being used to scam people was called Ultima Keyboard Pro, he said in a blog post published Monday.

“The fake apps I found feature a wide range of categories such as custom keyboards, QR code scanners, video and photo editors, spam call blockers, camera filters, and games, among others,” Vavra wrote in the post.

Infosec Insiders Newsletter

Essentially, the campaign — which appears to have started in May and is ongoing — is comprised of at least 151 apps that at

Article source:

Pin It on Pinterest

iPhone Optin3

Subscribe To Our SMS Marketing News

Join our mailing list to receive the latest news and updates.

You have Successfully Subscribed!