Google removes 28 fraudulent apps from Play Store

Google has removed 28 fraudulent Android applications from the Play Store that falsely claimed to reveal call, SMS, and WhatsApp histories. These apps, downloaded over 7.3 million times, generated fake data and charged users subscription fees ranging from $6 to $80, with most victims located in India, according to Tech Radar.

Security researchers at ESET uncovered the malicious campaign, dubbed CallPhantom, which primarily targeted users in India, indicated by the preselected +91 country code and support for the UPI payment system. The fraudulent apps promised access to call logs and message histories but instead fabricated data, embedding random phone numbers and call details directly into their code. Users were subjected to subscription packages costing between $6 and $80.

While Google has removed the apps and refunded payments made through its official billing system, victims who used third-party payment methods are advised to seek reimbursement directly from their payment providers.

Source: Tech Radar