Fraud Trapdoor on Android: four hundred fifty five apps and six hundred fifty nine million fake daily requests

Published on May 23, 2026 | Translated from Spanish

The Trapdoor advertising fraud has been discovered on Android following an analysis of anomalous traffic. Researchers detected non-human behavior patterns, revealing that 455 malicious applications simulated real interactions to generate 659 million daily bid requests. This demonstrates the need for constant vigilance in the mobile ecosystem, where scammers charge for ads that were never seen by real users.

photorealistic technical scene of a smartphone screen displaying a malware dashboard, 455 app icons glowing red in a grid, a massive digital waterfall of 659 million false ad requests cascading down like fake traffic streams, a glowing trapdoor icon opening beneath the phone, human silhouette fading into a botnet shadow, forensic analysis tools scanning the data flow, cinematic dark blue and neon orange lighting, ultra-detailed circuit board textures, cyber security visualization style

How the deception works: simulated traffic and automated requests 🕵️

Malicious developers integrated modified ad libraries into seemingly legitimate applications. These libraries generated fake clicks and views through automated scripts, mimicking human behavior to deceive advertising platforms. The anomalous traffic was characterized by constant spikes and repetitive patterns, which enabled its detection. There is a call to strengthen application verification and real-time security to prevent similar future abuses.

The perfect scam: ads that not even your grandma would see 😅

The saddest part of the Trapdoor case is that the scammers tried so hard to simulate human interactions that they could have even fooled a robot. 455 apps and 659 million daily requests so that no one, absolutely no one, saw a single real ad. It's like throwing a party where all the guests are holograms and the DJ is a recording. Good thing the anomalous traffic spilled the truth.