A group of fake call history apps managed to accumulate 7.3 million downloads on Google Play before being detected. Disguised as useful tools, they actually activated hidden subscriptions and made unauthorized charges to users. The scammers used deceptive tactics to get victims to accept terms that allowed recurring charges without their explicit knowledge, also accessing personal data through excessive permissions.
How these malicious applications operated in the background 📱
Once installed, the apps requested permissions to read contacts, record calls, and access SMS. This allowed them to intercept verification codes and confirm premium subscriptions without user intervention. The developers used remote servers to hide data traffic and avoid detection by Google Play Protect. The fraud was based on a monthly subscription model that charged between 10 and 30 dollars, taking advantage of the trust of those seeking simple solutions to manage their phone history.
The scam that turns your history into a subscription receipt 💸
It turns out that having a detailed record of your calls now costs more than the data plan itself. The scammers understood that people would pay to organize their contacts, but they forgot to mention that the price included an unsolicited lifetime membership. If you ever thought a free app was too good to be true, here is the confirmation: your call history is now worth gold, and not exactly for you.